last executing test programs:

4m26.883540974s ago: executing program 2 (id=618):
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x6, 0xa, 0x20, 0x30}, {0x100000000, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0xcb, 0x8, 0x800000000001}, {0xfffffffffffffff9, 0xfffffffffff7fffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x210000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

4m26.70431671s ago: executing program 2 (id=620):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000032c00048018000180080001006c6f67000c0002800800054000000008100001800c000100636f756e746572000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r0)

4m26.592551533s ago: executing program 2 (id=622):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x45e, &(0x7f0000000b40)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@grpquota}, {@nodiscard}]}, 0x3, 0x453, &(0x7f0000000f80)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8040)

4m26.092597489s ago: executing program 2 (id=625):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@usrjquota}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@nombcache}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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")
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f00000001c0))

4m25.713848071s ago: executing program 2 (id=629):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m25.094542921s ago: executing program 2 (id=636):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@tclass={{0x14, 0x29, 0x34, 0x8001}}], 0x18}, 0x40c0)

4m24.524721298s ago: executing program 32 (id=636):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@tclass={{0x14, 0x29, 0x34, 0x8001}}], 0x18}, 0x40c0)

2m57.851596385s ago: executing program 5 (id=1248):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3bc, 0x0, &(0x7f0000000540)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfa1d}, 0x50)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

2m57.623849212s ago: executing program 5 (id=1251):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)

2m57.444111848s ago: executing program 5 (id=1252):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x40040c1)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, 0x8)

2m57.196638666s ago: executing program 5 (id=1255):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x406, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@resgid}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlink(&(0x7f0000000100)='./file0/file1\x00')

2m56.062974711s ago: executing program 5 (id=1260):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002700)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

2m55.064462073s ago: executing program 5 (id=1263):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

2m54.423312283s ago: executing program 33 (id=1263):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

32.134567336s ago: executing program 4 (id=2708):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

31.779483797s ago: executing program 4 (id=2711):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

31.433299928s ago: executing program 4 (id=2715):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x8e59, 0x0, 0x3})
close_range(r2, r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

31.237712635s ago: executing program 4 (id=2718):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$eJzs3E9sFFUcAODfbLe0hSIVEaWiFtHYaGyhoHAwMRhNPGhixIMem7YQZKGmrYkQAkti8GhIvBrj0asHr2q8GE4mXvFoYkiI4QJ4WjO7s+12O136Z9tK+33Jsu/NvJn33r55s2/eYxvAljWQ/pNE9EbEzYjYFRGF5gQDtbd7dy6N3b9zaSzKlcrJf5L0sLibxjNJ9r4jiwwWIgpfJHM7GkxfuHh2tFSamMriwzPnPh2evnDxlTPnRk9PnJ44P3L8+NEjh4+9NvLq8iuVk19ar7v9lyf373vn4+vvjRXr27uz98Z6tMtADOQVpeqFdme2wXY2hJNiq5RvrH1hWLL0+k+bq7Pa/3dFR7RsPGATqVQqla4s3Llwd7nS7OqCLcBDK4mNLgGwMepf9Onzb/2VN07YtnZDkA11+0TtASit973sFfFsdWN9HqSz6fm2nQaiGB+V//02faXx4hrMQwAANPr5RH0k2DT+64vY25DukWwNpS8iHo2I3RHxWETsiYjHo5b2iYh4sun8HRFRaZH/QFN84fizcGt1NWwtHf+9nq1tzY3/onEVrK8ji+2MqA+YJw5ln8lgdHadOlOaONwij1/e+uOrxfal9a+P/9JXmn99LJiV41axa/4x46MzoyuucJPbVyP6i831T4oRyexKQBIR+yKi/9dvlnzevobwmZe+3z8baZpkfHD9qyq562htWKqofBfxYq39yzGv/edyTFqvTw53R2ni0HB6FRzKzePG79fez9ueLKX+P/7VfNjbx346mfWs1Uvbf3vD9R/19du5+vclEcnseu30Iie6snge1/78ctFnmpVe/9uSD3ui4bn089GZmanDEduSd2PB9pHZZd56vPoe5Vr9Bw/m9//d2THpJ/FURKQX8dMR8UzUnhAHonLlQEQ8FxEHF69+/Pbm85+svP5rK63/eO79b177z63Xp4F069S8LaOlpFxLPbdlNtBx9sDN+/35+S+t/Y9WQ4PZlvz7XzLvFrGwFPmBVX58AAAA8FAoRERvw1xSbxQKQ0O1OaA9sb1QmpyeeTmZ/Oz8eO03An0NaWvzwZ1Jff6zryE+0hQ/ks0bf93RU40PjU2WxjeozkDNjmqfTwpDs/eCWv9P/d2eKWbg/8xPfmDrelD/33t9nQoCrDvf/7BVTV1uiJQXSVT2P2Vgc1rK97+5QNic8vp/i//P7YEBNomK7gxb2nL6//y0N3a1vTDAuirGB7PhwoaWBFhvxv+wJS3pR/IrDlS68nd1x8LE0d36hB2xsmL05OS1IYF0ZLXK89RbbXlH9eTuKrY+qv7XFBZNE4XlFb5r7k9GJKtp01Orb4vTe9t98XdWsvWxdl82P6xJP31g454dLbW+b4z0tv1WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCb+CwAA//+0FNMg")
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x26b)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x2010009, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

30.536510846s ago: executing program 4 (id=2721):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

28.8350619s ago: executing program 4 (id=2729):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1000)
write$dsp(r0, &(0x7f00000001c0)='\\', 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

28.070910534s ago: executing program 34 (id=2729):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1000)
write$dsp(r0, &(0x7f00000001c0)='\\', 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

5.148885878s ago: executing program 1 (id=2908):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@sys_tz}, {@sys_tz}, {@discard}, {@keep_last_dots}, {@discard}, {@dmask={'dmask', 0x3d, 0x11f1}}, {@keep_last_dots}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x41, 0x1521, &(0x7f0000000580)="$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")
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
truncate(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x173)

4.997230383s ago: executing program 1 (id=2910):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509", @ANYRESOCT], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0xeeb)

3.468455261s ago: executing program 0 (id=2923):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
unshare(0x20000400)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000))

3.278275487s ago: executing program 1 (id=2925):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001400000018000180140002006e657464657673696d3000000000040008000d000800000005000b000900000008000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3.107457483s ago: executing program 0 (id=2926):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0x6, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)

3.066015574s ago: executing program 1 (id=2927):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000002008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000009b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.88571505s ago: executing program 7 (id=2930):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
madvise(&(0x7f000040a000/0x3000)=nil, 0x3000, 0x9)

2.720381795s ago: executing program 0 (id=2931):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000000})

2.652068017s ago: executing program 1 (id=2932):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000580)={0x44, &(0x7f00000001c0)={0x20, 0x15, 0x1c, "db398a9971c2561bbeaec00051cd6f58af5c4c53905617bcbb15bfd9"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x56}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x2, 0xe2, 0xff, 0x3, 0x7, 0x1, 0x3bcc, 0x1, 0x10, 0x5}}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x95}, &(0x7f0000000540)={0x20, 0x89, 0x2}})

2.513362721s ago: executing program 0 (id=2934):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c757365725f78610974722c002027be04c85c7d64eb9f32cc4f96ad71a50105de0c0018a8e99a3b50bde6cb87a492096a30aefae349693420758e3a167cb1127fc169fbaa1866fa1a6e5eba87f1d46eb4434dda990f7b3383760c776fc583eaf0892041ef270aced8ae045234a72c4d5dde9fe826fc2567e2bd40d1a398789b00ec546471b6deabb9225a609ab5e3bddf14715fb412a0cc6578dae3583b77b17d04b250fb894e0a380250f1da82b81ad80e36b6b543ddea4864820bc2ada1c8dbc253e418671b7daf08b941ccefae749c", @ANYRESOCT], 0x21, 0x552d, &(0x7f000000abc0)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x3ff, 0x0, 0x0)

2.047734926s ago: executing program 6 (id=2937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000aa7500000a4c0000000c0a010100000000000000000a0000c50900020073797a31000000000900010073797a3100000000200003801c0000800c000180060002"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.888722001s ago: executing program 7 (id=2938):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400e0ff07000700ac1414aa05000800e000000106000b000a0000000800020005"], 0x34}}, 0x0)

1.759350655s ago: executing program 6 (id=2939):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)

1.723386756s ago: executing program 7 (id=2940):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc)

1.573292491s ago: executing program 6 (id=2941):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0x30, 0x94, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x7, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xa5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x40, 0x1}}}}}]}}]}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

1.547976872s ago: executing program 3 (id=2942):
r0 = msgget$private(0x0, 0x3ac)
msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0)
msgsnd(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300"], 0xbe, 0x800)
msgrcv(r0, 0x0, 0x0, 0x1, 0x4800)

1.539522512s ago: executing program 7 (id=2943):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000002, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4020000}, 0x0)

1.28011173s ago: executing program 7 (id=2944):
syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000006740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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")
sendfile(r0, r0, 0x0, 0xe3aa6ea)

1.247971341s ago: executing program 3 (id=2945):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)

965.8413ms ago: executing program 0 (id=2946):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x29}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x38}}, 0xf0)

917.866762ms ago: executing program 3 (id=2947):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f00000002c0)="41dfb080ca21db08098e002f86dd", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)

685.618449ms ago: executing program 0 (id=2948):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
madvise(&(0x7f000040a000/0x3000)=nil, 0x3000, 0x9)

611.477631ms ago: executing program 3 (id=2949):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "27f113a4921f26c4"}, 0x10}}, 0x0)

537.332724ms ago: executing program 6 (id=2950):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000540)=0x8)

417.356638ms ago: executing program 3 (id=2951):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa20, 0xfff9, 0x81, 0xe, 0x8, 0x7, 0xaa, 0x5]}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000)

285.062752ms ago: executing program 6 (id=2952):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
write$bt_hci(r1, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0xa)

222.337714ms ago: executing program 1 (id=2953):
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='N-'], 0x31)

155.086745ms ago: executing program 3 (id=2954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040)

102.906938ms ago: executing program 7 (id=2955):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'pimreg\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "1f54d18703cc5a48f03db56f16c7395766b94a47ad4b2121ab921de003fda20d", "6c145f10385bfeaae3b0b911ce9d20c9e0897ce0c06a8c726f82227b54580eb0", "78f36de050317ab351653b0e5effa71c13397654c7326b434d0377438f4180ad", "694a51d4ae35798fa1986471a5f792db17a09a7411cc083fd92d730e98e1c49a", "dc36dc9ee5cc307e6dae5a6866dd6e09f6b9a098b0c975d60edfa38a44d17b8d", "0b94f77915cdd5166840b968", 0xa, 0x20008, 0x5, 0x5, 0xfffc}})

0s ago: executing program 6 (id=2956):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2b4602, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

kernel console output (not intermixed with test programs):

 0 has an invalid interface number: 51 but max is 0
[  267.944693][ T5710] usb 5-1: config 0 has no interface number 0
[  268.018683][ T5710] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  268.048725][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.057784][ T5710] usb 5-1: Product: syz
[  268.058281][ T4351] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  268.063958][ T9316] fido_id[9316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  268.138202][ T5710] usb 5-1: Manufacturer: syz
[  268.138224][ T5710] usb 5-1: SerialNumber: syz
[  268.140354][ T5710] usb 5-1: config 0 descriptor??
[  268.170223][ T5710] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  268.212035][ T8291] EXT4-fs (loop6): unmounting filesystem.
[  268.279148][ T4351] usb 4-1: Using ep0 maxpacket: 8
[  268.336395][ T4351] usb 4-1: unable to get BOS descriptor or descriptor too short
[  268.337175][ T4351] usb 4-1: unable to read config index 0 descriptor/start: -71
[  268.337205][ T4351] usb 4-1: can't read configurations, error -71
[  268.364532][ T5710] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  268.375957][ T9330] netlink: 26332 bytes leftover after parsing attributes in process `syz.1.1622'.
[  268.430400][ T5710] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  268.565318][ T9332] mkiss: ax0: crc mode is auto.
[  268.638450][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  268.840177][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  268.840894][ T4319] usb 5-1: USB disconnect, device number 20
[  268.916059][ T4319] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  269.022387][ T4319] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  269.036233][ T9346] loop0: detected capacity change from 0 to 1024
[  269.072197][ T4319] quatech2 5-1:0.51: device disconnected
[  269.077065][ T9346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.256439][ T9352] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  269.266919][ T5710] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  269.447314][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1630'.
[  269.460367][ T5710] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  269.483438][ T5710] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  269.524493][ T5710] usb 2-1: config 220 has an invalid descriptor of length 104, skipping remainder of the config
[  269.574931][ T5710] usb 2-1: config 220 has no interface number 2
[  269.612917][ T5710] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  269.683455][ T5710] usb 2-1: config 220 interface 0 has no altsetting 0
[  269.719808][ T5710] usb 2-1: config 220 interface 76 has no altsetting 0
[  269.745184][ T5710] usb 2-1: config 220 interface 1 has no altsetting 0
[  269.770349][ T5710] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  269.836460][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.904202][ T5710] usb 2-1: Product: syz
[  269.930425][ T5710] usb 2-1: Manufacturer: syz
[  269.935086][ T5710] usb 2-1: SerialNumber: syz
[  270.119677][   T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  270.174671][ T5710] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  270.204734][ T5710] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  270.235107][ T5710] usb 2-1: No valid video chain found.
[  270.267482][ T5710] usb 2-1: selecting invalid altsetting 0
[  270.305397][ T9377] loop0: detected capacity change from 0 to 4096
[  270.339329][ T5710] usb 2-1: selecting invalid altsetting 0
[  270.345115][ T5710] usbtest: probe of 2-1:220.1 failed with error -22
[  270.378090][   T22] usb 7-1: Using ep0 maxpacket: 8
[  270.388482][   T22] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  270.408664][ T5710] usb 2-1: USB disconnect, device number 13
[  270.428167][   T22] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  270.464872][   T22] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  270.503808][   T22] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  270.553418][   T22] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  270.565460][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.757644][ T9377] ntfs3: loop0: no free space to extend mft
[  270.814285][   T22] usb 7-1: GET_CAPABILITIES returned 0
[  270.820076][   T22] usbtmc 7-1:16.0: can't read capabilities
[  271.040501][ T5713] usb 7-1: USB disconnect, device number 4
[  271.544866][ T9402] loop1: detected capacity change from 0 to 2048
[  271.984095][ T9397] loop0: detected capacity change from 0 to 131072
[  272.002655][ T4896] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  272.013859][ T9397] F2FS-fs (loop0): invalid crc value
[  272.022971][ T9397] F2FS-fs (loop0): Found nat_bits in checkpoint
[  272.063172][ T9397] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  272.115734][ T9397] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[  272.338145][ T5713] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  272.538127][ T5713] usb 4-1: Using ep0 maxpacket: 32
[  272.550389][ T5713] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.590280][ T5713] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  272.628114][ T5710] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  272.668099][ T5713] usb 4-1: config 0 interface 0 has no altsetting 0
[  272.695259][ T5713] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[  272.731959][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.781057][ T5713] usb 4-1: config 0 descriptor??
[  272.833190][ T5710] usb 2-1: Using ep0 maxpacket: 32
[  272.841030][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.892856][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.924898][ T5710] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  272.956217][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.985318][ T5710] usb 2-1: config 0 descriptor??
[  273.199697][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x0
[  273.225232][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x0
[  273.271127][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x0
[  273.308122][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x0
[  273.330626][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x0
[  273.360712][ T9427] loop4: detected capacity change from 0 to 32768
[  273.374642][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x0
[  273.395671][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x6
[  273.418737][ T5710] koneplus 0003:1E7D:2D51.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[  273.437922][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x3
[  273.455468][ T5713] wacom 0003:056A:00C6.000D: unknown main item tag 0x7
[  273.478825][ T5713] wacom 0003:056A:00C6.000D: hidraw1: USB HID v0.81 Device [HID 056a:00c6] on usb-dummy_hcd.3-1/input0
[  273.492876][ T5713] usb 4-1: USB disconnect, device number 18
[  273.517172][ T9427] XFS (loop4): Mounting V5 Filesystem
[  273.611774][ T9427] XFS (loop4): Ending clean mount
[  273.816933][ T4319] usb 2-1: USB disconnect, device number 14
[  273.943708][ T9455] fido_id[9455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  274.043125][ T4287] XFS (loop4): Unmounting Filesystem
[  274.187067][ T9457] fido_id[9457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  274.498457][ T5713] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  274.698192][ T5713] usb 4-1: Using ep0 maxpacket: 16
[  274.706631][ T5713] usb 4-1: config 127 has an invalid interface number: 124 but max is 0
[  274.758653][ T5713] usb 4-1: config 127 has no interface number 0
[  274.778070][ T5713] usb 4-1: config 127 interface 124 has no altsetting 0
[  274.802933][ T5713] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  274.838109][ T5710] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  274.848738][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.875296][ T5713] usb 4-1: Product: syz
[  274.890034][ T5713] usb 4-1: Manufacturer: syz
[  274.900163][ T5713] usb 4-1: SerialNumber: syz
[  275.038242][ T5710] usb 7-1: Using ep0 maxpacket: 32
[  275.046149][ T5710] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  275.064445][ T5710] usb 7-1: config 0 has no interface number 0
[  275.094006][ T5710] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  275.117490][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.137042][ T5710] usb 7-1: Product: syz
[  275.160035][ T5710] usb 7-1: Manufacturer: syz
[  275.168401][ T5710] usb 7-1: SerialNumber: syz
[  275.195444][ T5710] usb 7-1: config 0 descriptor??
[  275.203407][ T5710] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  275.249073][ T9489] loop1: detected capacity change from 0 to 256
[  275.267474][ T9489] exfat: Deprecated parameter 'namecase'
[  275.296636][ T9489] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  275.411124][ T5710] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  275.451641][ T5710] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  275.845339][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  275.860622][ T5710] usb 7-1: USB disconnect, device number 5
[  275.879992][ T5710] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  275.891929][ T5713] usb 4-1: reset high-speed USB device number 19 using dummy_hcd
[  275.925641][ T5710] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  275.967296][ T5710] quatech2 7-1:0.51: device disconnected
[  276.097200][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short
[  276.110780][ T5713] usb 4-1: device firmware changed
[  276.137840][ T5713] usb 4-1: USB disconnect, device number 19
[  276.673150][ T9525] loop6: detected capacity change from 0 to 128
[  276.709858][ T9525] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  276.791973][ T9525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.992477][ T9513] loop0: detected capacity change from 0 to 32768
[  277.401324][ T9549] loop6: detected capacity change from 0 to 128
[  277.436229][ T9549] EXT4-fs: inline encryption not supported
[  277.475478][ T9549] EXT4-fs (loop6): Test dummy encryption mode enabled
[  277.574669][ T9549] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  277.594193][ T9549] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  277.946023][ T8291] EXT4-fs (loop6): unmounting filesystem.
[  278.212958][ T9542] loop1: detected capacity change from 0 to 32768
[  278.385349][ T9542] XFS (loop1): Mounting V5 Filesystem
[  278.454634][ T9542] XFS (loop1): Ending clean mount
[  278.472586][ T9542] XFS (loop1): Quotacheck needed: Please wait.
[  278.632306][ T9542] XFS (loop1): Quotacheck: Done.
[  278.839839][ T9602] sctp: [Deprecated]: syz.6.1698 (pid 9602) Use of int in max_burst socket option deprecated.
[  278.839839][ T9602] Use struct sctp_assoc_value instead
[  278.861512][ T7935] XFS (loop1): Unmounting Filesystem
[  280.115806][ T9645] loop4: detected capacity change from 0 to 256
[  280.165773][ T9645] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[  280.235428][ T9645] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  280.429857][ T9630] loop1: detected capacity change from 0 to 32768
[  280.592699][ T9630] XFS (loop1): Mounting V5 Filesystem
[  280.684541][ T9670] program syz.4.1720 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.798632][ T9630] XFS (loop1): Ending clean mount
[  281.033775][ T7935] XFS (loop1): Unmounting Filesystem
[  282.082724][ T9715] program syz.0.1735 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  282.315384][ T9721] loop6: detected capacity change from 0 to 256
[  282.323634][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'.
[  282.330999][ T5476] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  282.349467][ T9725] sctp: [Deprecated]: syz.0.1739 (pid 9725) Use of int in max_burst socket option deprecated.
[  282.349467][ T9725] Use struct sctp_assoc_value instead
[  282.382574][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1737'.
[  282.538420][ T5476] usb 2-1: Using ep0 maxpacket: 8
[  282.545121][ T5476] usb 2-1: config index 0 descriptor too short (expected 26, got 18)
[  282.586391][ T5476] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  282.658206][ T5476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.677108][ T5476] usb 2-1: Product: syz
[  282.691567][ T5476] usb 2-1: Manufacturer: syz
[  282.696221][ T5476] usb 2-1: SerialNumber: syz
[  282.720305][ T5476] usb 2-1: config 0 descriptor??
[  282.742072][ T5476] gspca_main: sq930x-2.14.0 probing 2770:930c
[  283.050651][ T9745] loop4: detected capacity change from 0 to 1024
[  283.109887][ T9749] program syz.0.1747 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  283.441782][ T9759] program syz.0.1750 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  283.573968][ T5476] gspca_sq930x: ucbus_write failed -71
[  283.585748][ T5476] sq930x: probe of 2-1:0.0 failed with error -71
[  283.623266][ T5476] usb 2-1: USB disconnect, device number 15
[  283.968478][ T9776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.666656][ T9803] Cannot find add_set index 4 as target
[  285.164289][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'.
[  285.372201][ T9822] loop1: detected capacity change from 0 to 64
[  285.777435][ T9833] netlink: 'syz.1.1781': attribute type 3 has an invalid length.
[  285.806279][ T9833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1781'.
[  286.243922][ T9849] loop1: detected capacity change from 0 to 128
[  286.321258][ T9851] loop6: detected capacity change from 0 to 512
[  286.366592][ T9851] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  286.427863][ T9851] EXT4-fs (loop6): 1 orphan inode deleted
[  286.443614][ T9851] EXT4-fs (loop6): 1 truncate cleaned up
[  286.477381][ T9851] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  286.559828][ T9851] EXT4-fs (loop6): shut down requested (2)
[  286.582577][ T9851] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #2: comm syz.6.1791: directory missing '.'
[  286.704568][ T8291] EXT4-fs (loop6): unmounting filesystem.
[  287.532311][ T9858] loop1: detected capacity change from 0 to 40427
[  287.623492][ T9858] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  287.673590][ T9858] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  287.736282][ T9858] F2FS-fs (loop1): invalid crc value
[  287.769102][ T9858] F2FS-fs (loop1): Found nat_bits in checkpoint
[  287.968881][ T9858] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  287.975982][ T9858] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  288.186078][ T9866] loop6: detected capacity change from 0 to 40427
[  288.250472][ T9866] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff
[  288.298437][ T9866] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  288.348716][ T9866] F2FS-fs (loop6): invalid crc value
[  288.385935][ T9866] F2FS-fs (loop6): Found nat_bits in checkpoint
[  288.393914][ T9887] sctp: [Deprecated]: syz.3.1804 (pid 9887) Use of int in maxseg socket option.
[  288.393914][ T9887] Use struct sctp_assoc_value instead
[  288.465408][ T9866] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  288.549003][ T9866] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  288.650038][ T9866] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  288.757841][ T9866] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x111/0xfe0
[  288.929119][ T8291] syz-executor: attempt to access beyond end of device
[  288.929119][ T8291] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.022520][ T9907] loop1: detected capacity change from 0 to 512
[  289.133307][ T9907] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  289.169386][ T9907] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  289.212144][ T9907] EXT4-fs (loop1): 1 truncate cleaned up
[  289.252755][ T9907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  289.293568][ T9907] EXT4-fs (loop1): shut down requested (1)
[  289.387701][ T7935] EXT4-fs (loop1): unmounting filesystem.
[  289.425663][ T9916] netlink: 'syz.4.1817': attribute type 1 has an invalid length.
[  289.468373][ T5713] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  289.476080][ T9916] netlink: 'syz.4.1817': attribute type 2 has an invalid length.
[  289.506009][ T9917] netlink: 'syz.4.1817': attribute type 1 has an invalid length.
[  289.531234][ T9917] netlink: 'syz.4.1817': attribute type 2 has an invalid length.
[  289.668089][ T5713] usb 4-1: Using ep0 maxpacket: 16
[  289.674993][ T5713] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  289.698149][ T5713] usb 4-1: config 0 has no interface number 0
[  289.704374][ T5713] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.721717][ T9902] loop0: detected capacity change from 0 to 40427
[  289.733965][ T5713] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.751706][ T9902] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  289.771670][ T9902] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  289.788069][ T5713] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  289.798205][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.809377][ T9902] F2FS-fs (loop0): invalid crc value
[  289.819694][ T5713] usb 4-1: config 0 descriptor??
[  289.828026][ T5476] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  289.852574][ T9902] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  290.034626][ T9902] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  290.034952][ T5476] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  290.050902][ T9902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  290.082418][ T5476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.114312][ T5476] usb 2-1: config 0 descriptor??
[  290.285634][ T4273] syz-executor: attempt to access beyond end of device
[  290.285634][ T4273] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.466960][ T5713] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000F/input/input23
[  290.549027][ T5476] ath6kl: Failed to submit usb control message: -71
[  290.563020][ T5476] ath6kl: unable to send the bmi data to the device: -71
[  290.579318][ T5476] ath6kl: Unable to send get target info: -71
[  290.587249][ T5713] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000F/input/input24
[  290.597054][ T5476] ath6kl: Failed to init ath6kl core: -71
[  290.641778][ T9944] netlink: 'syz.0.1826': attribute type 12 has an invalid length.
[  290.650311][ T9937] loop4: detected capacity change from 0 to 32768
[  290.669140][ T9944] netlink: 'syz.0.1826': attribute type 3 has an invalid length.
[  290.677585][ T9944] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1826'.
[  290.696605][ T9937] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1823 (9937)
[  290.722476][ T5476] ath6kl_usb: probe of 2-1:0.0 failed with error -71
[  290.722962][ T5713] uclogic 0003:28BD:0071.000F: input,hiddev0,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1
[  290.756220][ T5713] usb 4-1: USB disconnect, device number 20
[  290.804834][ T5476] usb 2-1: USB disconnect, device number 16
[  290.833928][ T9937] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  290.898158][ T9937] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  290.906966][ T9937] BTRFS info (device loop4): enabling disk space caching
[  290.948116][ T9937] BTRFS info (device loop4): force clearing of disk cache
[  290.957586][ T9937] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  291.012295][ T9937] BTRFS info (device loop4): use zstd compression, level 3
[  291.052512][ T9937] BTRFS info (device loop4): disk space caching is enabled
[  291.075161][ T9945] fido_id[9945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  291.136796][ T9954] loop0: detected capacity change from 0 to 512
[  291.140963][ T9958] netlink: 'syz.6.1831': attribute type 12 has an invalid length.
[  291.151595][ T9958] netlink: 'syz.6.1831': attribute type 29 has an invalid length.
[  291.160302][ T9958] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1831'.
[  291.176100][ T9958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1831'.
[  291.188937][ T9954] EXT4-fs: Ignoring removed nobh option
[  291.215197][ T9954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  291.253932][ T9954] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  291.312429][ T9954] EXT4-fs (loop0): 1 truncate cleaned up
[  291.359738][ T9954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  291.548491][ T9937] BTRFS info (device loop4): enabling ssd optimizations
[  291.575988][ T9937] BTRFS info (device loop4): rebuilding free space tree
[  291.647283][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  291.671372][ T9937] BTRFS info (device loop4): disabling free space tree
[  291.693590][ T9937] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  291.728986][ T9937] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  291.999289][ T4317] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  292.030206][ T9984] loop0: detected capacity change from 0 to 4096
[  292.078364][ T9984] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  292.161746][ T9984] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  292.205946][ T9984] ntfs3: loop0: Failed to load $Extend.
[  292.218297][ T4317] usb 2-1: Using ep0 maxpacket: 32
[  292.225073][ T4317] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  292.254854][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.333608][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'.
[  292.433518][ T4287] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  292.524242][ T4317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  292.546280][ T9999] ntfs3: loop0: ino=21, "freezer.parent_freezing" failed to extend initialized size to 208e24b.
[  292.700267][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  292.748357][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  292.770742][ T4317] usb 2-1: media controller created
[  292.803383][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  292.876028][ T4317] az6027: usb out operation failed. (-71)
[  292.888647][ T4317] az6027: usb out operation failed. (-71)
[  292.908106][ T4317] stb0899_attach: Driver disabled by Kconfig
[  292.941671][ T4317] az6027: no front-end attached
[  292.941671][ T4317] 
[  292.963966][ T4317] az6027: usb out operation failed. (-71)
[  292.978012][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  292.996885][ T4317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25
[  293.103458][ T4317] dvb-usb: schedule remote query interval to 400 msecs.
[  293.111110][ T4317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  293.150425][ T4317] usb 2-1: USB disconnect, device number 17
[  293.389503][ T4317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  293.411529][T10016] loop4: detected capacity change from 0 to 256
[  293.463749][T10016] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  295.155712][T10033] loop4: detected capacity change from 0 to 40427
[  295.220840][T10033] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff
[  295.251242][T10033] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4
[  295.253466][T10039] loop1: detected capacity change from 0 to 40427
[  295.282537][T10033] F2FS-fs (loop4): invalid crc value
[  295.324713][T10033] F2FS-fs (loop4): Found nat_bits in checkpoint
[  295.369366][ T4265] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  295.483206][T10033] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  295.588401][T10033] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  295.733595][T10033] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  295.780421][T10033] F2FS-fs (loop4) : inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1a8/0x340
[  295.977087][ T4287] syz-executor: attempt to access beyond end of device
[  295.977087][ T4287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  296.275011][T10084] loop6: detected capacity change from 0 to 4096
[  296.365456][T10084] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512)
[  296.434623][T10089] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  296.624879][T10095] IPv6: addrconf: prefix option has invalid lifetime
[  296.662279][T10097] loop0: detected capacity change from 0 to 128
[  296.911696][T10102] program syz.1.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.394903][T10114] loop0: detected capacity change from 0 to 2048
[  297.434499][T10120] loop1: detected capacity change from 0 to 1024
[  297.437585][T10114] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  297.467851][T10114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.508032][ T4316] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  297.728331][ T4316] usb 5-1: Using ep0 maxpacket: 32
[  297.735751][ T4316] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  297.765022][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0
[  297.799432][ T4316] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  297.829161][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.863358][ T4316] usb 5-1: config 0 descriptor??
[  297.932406][T10130] loop6: detected capacity change from 0 to 2048
[  298.000499][T10130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.631716][ T4316] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0
[  298.646364][ T4316] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0
[  298.661795][ T4316] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0
[  298.677459][ T4316] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0
[  298.707643][ T4316] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0
[  298.727439][ T4316] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0
[  299.151785][ T4316] corsair-cpro: probe of 0003:1B1C:0C10.0010 failed with error -110
[  299.186485][ T4316] usb 5-1: USB disconnect, device number 21
[  299.400816][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'.
[  299.416033][T10157] fido_id[10157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  299.494251][   T46] tipc: Subscription rejected, illegal request
[  299.575725][T10170] loop4: detected capacity change from 0 to 512
[  299.607160][T10170] EXT4-fs: Ignoring removed nobh option
[  299.629238][T10170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  299.703521][T10170] EXT4-fs (loop4): 1 truncate cleaned up
[  299.718046][T10170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  299.840833][T10180] tipc: Started in network mode
[  299.880699][T10180] tipc: Node identity ac14140f, cluster identity 4711
[  299.892055][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  299.902564][T10180] tipc: New replicast peer: 172.20.20.187
[  299.942609][T10180] tipc: Enabled bearer <udp:syz2>, priority 10
[  300.151766][   T26] audit: type=1326 audit(1778903935.148:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x0
[  300.494141][T10202] netlink: 'syz.4.1917': attribute type 1 has an invalid length.
[  300.948909][ T5716] tipc: Node number set to 2886997007
[  301.149342][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1928'.
[  301.201683][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1928'.
[  301.565954][T10240] program syz.3.1935 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  302.421360][T10255] loop1: detected capacity change from 0 to 32768
[  302.503880][T10255] XFS (loop1): Mounting V5 Filesystem
[  302.621378][T10255] XFS (loop1): Ending clean mount
[  302.806870][ T7935] XFS (loop1): Unmounting Filesystem
[  303.249206][T10304] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1962'.
[  303.291923][T10308] loop6: detected capacity change from 0 to 512
[  303.424170][T10308] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.1964: bad orphan inode 13
[  303.468571][T10308] ext4_test_bit(bit=12, block=4) = 1
[  303.473940][T10308] is_bad_inode(inode)=0
[  303.480567][T10308] NEXT_ORPHAN(inode)=0
[  303.484677][T10308] max_ino=32
[  303.487880][T10308] i_nlink=1
[  303.491822][T10308] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  303.512776][T10311] loop4: detected capacity change from 0 to 4096
[  303.540511][T10311] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  303.578518][T10308] EXT4-fs warning (device loop6): dx_probe:845: inode #2: comm syz.6.1964: Hash code is SIPHASH, but hash not in dirent
[  303.670336][T10308] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1964: Corrupt directory, running e2fsck is recommended
[  303.778355][T10308] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 13: comm syz.6.1964: path /106/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  303.850574][T10323] netlink: 'syz.1.1957': attribute type 10 has an invalid length.
[  303.896060][T10323] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1957'.
[  303.918537][T10318] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 13: comm syz.6.1964: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  304.037399][T10308] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.1964: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  304.066795][T10323] team0: Port device virt_wifi0 added
[  304.317010][ T8291] EXT4-fs (loop6): unmounting filesystem.
[  304.416968][T10340] device syz_tun entered promiscuous mode
[  304.465469][T10339] device syz_tun left promiscuous mode
[  305.300845][T10334] loop0: detected capacity change from 0 to 40427
[  305.334543][T10334] F2FS-fs (loop0): invalid crc value
[  305.338049][ T5476] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  305.366032][T10334] F2FS-fs (loop0): Found nat_bits in checkpoint
[  305.438455][T10334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  305.539870][ T5476] usb 2-1: config index 0 descriptor too short (expected 65170, got 92)
[  305.580858][ T5476] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.619174][ T5476] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  305.623280][ T4273] syz-executor: attempt to access beyond end of device
[  305.623280][ T4273] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  305.652442][ T5476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.674337][ T5476] usb 2-1: Product: syz
[  305.687556][ T5476] usb 2-1: Manufacturer: syz
[  305.698028][ T5476] usb 2-1: SerialNumber: syz
[  306.435260][T10398] program syz.4.1997 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  306.528494][ T5476] cdc_ncm 2-1:1.0: SET_CRC_MODE failed
[  306.556709][ T5476] cdc_ncm 2-1:1.0: bind() failure
[  306.576017][ T5476] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  306.605012][ T5476] cdc_ncm 2-1:1.1: bind() failure
[  306.649172][ T5476] usb 2-1: USB disconnect, device number 18
[  306.823862][T10407] loop4: detected capacity change from 0 to 256
[  307.397438][T10425] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  307.424631][T10427] input: syz1 as /devices/virtual/input/input26
[  307.438123][T10425] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  307.888962][T10433] loop0: detected capacity change from 0 to 32768
[  307.900391][T10433] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  307.908758][T10433] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  307.938605][T10433] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  307.949662][ T5710] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  307.956632][ T5710] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  308.050079][ T5710] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 93ms
[  308.068113][ T5710] gfs2: fsid=syz:syz.0: jid=0: Done
[  308.076769][T10442] loop6: detected capacity change from 0 to 1024
[  308.083610][T10433] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  308.088082][ T4319] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  308.100914][T10442] hfsplus: Filesystem is marked locked, mounting read-only.
[  308.210646][T10442] hfsplus: filesystem is marked locked, leaving read-only.
[  308.298203][ T4319] usb 5-1: Using ep0 maxpacket: 32
[  308.315808][ T4319] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024
[  308.355847][ T4319] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64
[  308.400002][ T4319] usb 5-1: config 1 interface 0 has no altsetting 0
[  308.441593][ T4319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  308.455222][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.464800][ T4319] usb 5-1: Product: syz
[  308.474561][ T4319] usb 5-1: Manufacturer: syz
[  308.482342][ T4319] usb 5-1: SerialNumber: syz
[  308.507004][T10429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.520455][T10429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.766616][ T4319] cdc_ether: probe of 5-1:1.0 failed with error -71
[  308.785617][ T4319] usb 5-1: USB disconnect, device number 22
[  309.760508][T10483] loop1: detected capacity change from 0 to 512
[  309.843203][T10483] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.2046: bad orphan inode 13
[  309.883845][T10483] ext4_test_bit(bit=12, block=4) = 1
[  309.903369][T10483] is_bad_inode(inode)=0
[  309.917789][T10483] NEXT_ORPHAN(inode)=0
[  309.929427][T10483] max_ino=32
[  309.936064][T10483] i_nlink=1
[  309.939509][T10483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  309.957245][T10483] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.2046: Hash code is SIPHASH, but hash not in dirent
[  310.049764][T10483] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2046: Corrupt directory, running e2fsck is recommended
[  310.088490][T10483] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.2046: path /137/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  310.144502][T10494] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.2046: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  310.213719][T10483] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.2046: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  310.375197][ T7935] EXT4-fs (loop1): unmounting filesystem.
[  310.878092][ T5476] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  311.069961][ T5476] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  311.099018][ T5476] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  311.122796][ T5476] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  311.153967][ T5476] usb 5-1: config 220 has no interface number 2
[  311.169526][ T5476] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  311.203559][ T5476] usb 5-1: config 220 interface 0 has no altsetting 0
[  311.218869][ T5476] usb 5-1: config 220 interface 76 has no altsetting 0
[  311.223498][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'.
[  311.236368][ T5476] usb 5-1: config 220 interface 1 has no altsetting 0
[  311.275682][ T5476] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  311.302631][ T5476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.331478][ T5476] usb 5-1: Product: syz
[  311.350453][ T5476] usb 5-1: Manufacturer: syz
[  311.385655][ T5476] usb 5-1: SerialNumber: syz
[  311.622649][ T5476] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  311.631921][ T5476] usb 5-1: No valid video chain found.
[  311.637446][ T5476] usb 5-1: selecting invalid altsetting 0
[  311.680981][ T5476] usb 5-1: selecting invalid altsetting 0
[  311.686770][ T5476] usbtest: probe of 5-1:220.1 failed with error -22
[  311.698047][ T4319] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  311.719942][ T5476] usb 5-1: USB disconnect, device number 23
[  311.900396][ T4319] usb 4-1: unable to get BOS descriptor or descriptor too short
[  311.903075][T10532] loop6: detected capacity change from 0 to 32768
[  311.918698][ T4319] usb 4-1: not running at top speed; connect to a high speed hub
[  311.950985][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.975868][ T4319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.002384][ T4319] usb 4-1: string descriptor 0 read error: -22
[  312.018115][ T4319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  312.066750][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.093373][ T4319] usb 4-1: 0:2 : does not exist
[  312.094392][T10532] XFS (loop6): Mounting V5 Filesystem
[  312.265530][T10532] XFS (loop6): Ending clean mount
[  312.301968][T10543] loop0: detected capacity change from 0 to 8
[  312.496794][ T8291] XFS (loop6): Unmounting Filesystem
[  312.938075][ T4319] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  312.990907][ T4319] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  313.054698][ T4319] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  313.091772][ T4319] usb 4-1: USB disconnect, device number 21
[  313.353807][ T4896] udevd[4896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.454517][T10562] loop4: detected capacity change from 0 to 4096
[  313.537793][T10569] loop6: detected capacity change from 0 to 512
[  313.544680][T10562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  313.570517][T10569] EXT4-fs: Ignoring removed orlov option
[  313.628146][T10569] EXT4-fs (loop6): Test dummy encryption mode enabled
[  313.634957][T10569] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  313.705415][T10562] EXT4-fs (loop4): shut down requested (1)
[  313.750385][T10569] EXT4-fs (loop6): 1 truncate cleaned up
[  313.756084][T10569] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  313.914206][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  313.958062][ T5710] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  314.169929][ T5710] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  314.189180][ T5710] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  314.238318][ T5710] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  314.272306][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.293692][T10574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  314.394602][ T8291] EXT4-fs (loop6): unmounting filesystem.
[  314.543644][ T4316] usb 2-1: USB disconnect, device number 19
[  315.499424][T10615] loop1: detected capacity change from 0 to 64
[  315.620415][T10615] gfs2: path_lookup on c::: returned error -2
[  316.347815][T10614] loop4: detected capacity change from 0 to 131072
[  316.362462][T10614] F2FS-fs (loop4): invalid crc value
[  316.467038][T10614] F2FS-fs (loop4): Found nat_bits in checkpoint
[  316.538493][T10614] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  316.558397][T10614] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  316.898076][ T5710] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  316.914628][T10611] loop6: detected capacity change from 0 to 32768
[  317.059466][T10611] XFS (loop6): Mounting V5 Filesystem
[  317.090462][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.096895][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  317.106675][ T5710] usb 2-1: Using ep0 maxpacket: 32
[  317.113678][ T5710] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  317.137985][ T5710] usb 2-1: config 0 has no interface number 0
[  317.159212][ T5710] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  317.192875][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.254705][ T5710] usb 2-1: Product: syz
[  317.267658][ T5710] usb 2-1: Manufacturer: syz
[  317.279232][ T5710] usb 2-1: SerialNumber: syz
[  317.286112][ T5710] usb 2-1: config 0 descriptor??
[  317.316199][T10611] XFS (loop6): Ending clean mount
[  317.323622][ T5710] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  317.370908][   T26] audit: type=1800 audit(1778903952.368:77): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2089" name="file1" dev="loop6" ino=6150 res=0 errno=0
[  317.522253][ T5710] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  317.527812][ T8291] XFS (loop6): Unmounting Filesystem
[  317.602716][ T5710] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  317.937632][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  317.945217][ T5467] usb 2-1: USB disconnect, device number 20
[  317.951882][ T4319] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  318.003750][ T5467] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  318.045725][ T5467] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  318.084442][ T5467] quatech2 2-1:0.51: device disconnected
[  318.168188][ T4319] usb 5-1: Using ep0 maxpacket: 32
[  318.175623][ T4319] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  318.212845][ T4319] usb 5-1: config 0 has no interface number 0
[  318.237018][ T4319] usb 5-1: config 0 interface 184 has no altsetting 0
[  318.267546][ T4319] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  318.297501][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.323087][ T4319] usb 5-1: Product: syz
[  318.328735][ T4319] usb 5-1: Manufacturer: syz
[  318.333409][ T4319] usb 5-1: SerialNumber: syz
[  318.349318][ T4319] usb 5-1: config 0 descriptor??
[  318.359278][ T4319] smsc75xx v1.0.0
[  318.792857][T10659] Set syz1 is full, maxelem 0 reached
[  319.179458][ T4319] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  319.210966][ T4319] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  319.243688][ T4319] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  319.271512][ T4319] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  319.289106][ T4319] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  319.300418][ T5476] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  319.318208][ T4319] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  319.329621][ T4319] smsc75xx: probe of 5-1:0.184 failed with error -71
[  319.380486][ T4319] usb 5-1: USB disconnect, device number 24
[  319.427543][T10671] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  319.442978][T10671] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  319.456311][T10671] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume.
[  319.518113][ T5476] usb 2-1: Using ep0 maxpacket: 16
[  319.527730][ T5476] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.548715][ T5476] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  319.577213][ T5476] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  319.603328][ T5476] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  319.639697][ T5476] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.686835][ T5476] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  319.728068][ T5476] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  319.736377][ T5476] usb 2-1: Manufacturer: syz
[  319.763817][ T5476] usb 2-1: config 0 descriptor??
[  320.165199][T10687] loop6: detected capacity change from 0 to 512
[  320.208178][ T5476] rc_core: IR keymap rc-hauppauge not found
[  320.214276][ T5476] Registered IR keymap rc-empty
[  320.228149][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.278174][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.318725][ T5476] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  320.352630][ T5476] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27
[  320.397505][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.408887][    C0] mceusb 2-1:0.0: long-range (0x8d) receiver active
[  320.460070][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.508185][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.548108][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.598079][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.644387][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.692085][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.748248][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.788309][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.826793][ T5476] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  320.869232][ T5476] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  320.897604][ T5476] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x8d active)
[  320.932481][ T5476] usb 2-1: USB disconnect, device number 21
[  321.191244][T10716] input: syz0 as /devices/virtual/input/input28
[  322.238099][ T5465] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  322.297135][T10755] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.413324][T10729] loop6: detected capacity change from 0 to 40427
[  322.421951][T10729] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  322.428106][ T5465] usb 2-1: Using ep0 maxpacket: 8
[  322.439573][ T5465] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  322.447806][ T5465] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  322.450052][T10729] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  322.483061][T10760] program syz.0.2151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  322.488856][ T5465] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  322.500101][T10729] F2FS-fs (loop6): invalid crc value
[  322.524467][ T5465] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  322.536831][ T5465] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  322.555735][T10729] F2FS-fs (loop6): Found nat_bits in checkpoint
[  322.584389][ T5465] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  322.618351][ T5465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.671876][T10729] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  322.685446][T10729] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  322.865841][ T5465] usb 2-1: GET_CAPABILITIES returned 0
[  322.871886][ T5465] usbtmc 2-1:16.0: can't read capabilities
[  323.026441][   T46] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  323.066416][   T46] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  323.081874][ T5465] usb 2-1: USB disconnect, device number 22
[  323.551744][T10790] loop6: detected capacity change from 0 to 256
[  323.636942][T10790] FAT-fs (loop6): Directory bread(block 64) failed
[  323.658443][T10790] FAT-fs (loop6): Directory bread(block 65) failed
[  323.665118][T10790] FAT-fs (loop6): Directory bread(block 66) failed
[  323.723234][T10790] FAT-fs (loop6): Directory bread(block 67) failed
[  323.731441][T10790] FAT-fs (loop6): Directory bread(block 68) failed
[  323.782199][T10790] FAT-fs (loop6): Directory bread(block 69) failed
[  323.792734][T10790] FAT-fs (loop6): Directory bread(block 70) failed
[  323.804229][T10790] FAT-fs (loop6): Directory bread(block 71) failed
[  323.812050][T10790] FAT-fs (loop6): Directory bread(block 72) failed
[  323.831475][T10790] FAT-fs (loop6): Directory bread(block 73) failed
[  324.971282][T10804] loop4: detected capacity change from 0 to 40427
[  324.996187][T10804] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  325.035252][T10804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  325.066288][T10812] loop6: detected capacity change from 0 to 32768
[  325.092298][T10804] F2FS-fs (loop4): invalid crc value
[  325.223164][T10812] XFS (loop6): Mounting V5 Filesystem
[  325.277555][T10804] F2FS-fs (loop4): Found nat_bits in checkpoint
[  325.409084][T10812] XFS (loop6): Ending clean mount
[  325.560747][T10804] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  325.577840][ T8291] XFS (loop6): Unmounting Filesystem
[  325.583849][T10804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  326.003253][   T46] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  326.042831][   T46] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  326.053731][   T26] audit: type=1326 audit(1778903961.048:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.138125][   T26] audit: type=1326 audit(1778903961.078:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.218822][   T26] audit: type=1326 audit(1778903961.078:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.338086][   T26] audit: type=1326 audit(1778903961.078:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.415638][   T26] audit: type=1326 audit(1778903961.078:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.466280][   T26] audit: type=1326 audit(1778903961.078:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.528120][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'.
[  326.532427][   T26] audit: type=1326 audit(1778903961.078:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.585909][   T26] audit: type=1326 audit(1778903961.078:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.616615][   T26] audit: type=1326 audit(1778903961.078:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  326.658151][   T26] audit: type=1326 audit(1778903961.078:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.1.2183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840c99ce59 code=0x7fc00000
[  327.231686][T10890] pim6reg1: tun_chr_ioctl cmd 1074812118
[  327.532759][T10888] loop4: detected capacity change from 0 to 32768
[  327.616785][T10888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2198 (10888)
[  327.701133][T10888] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  327.731796][T10888] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  327.782735][T10888] BTRFS info (device loop4): using free space tree
[  328.078577][T10888] BTRFS info (device loop4): enabling ssd optimizations
[  328.419085][ T4287] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  329.005868][T10934] loop6: detected capacity change from 0 to 1024
[  329.158376][T10939] vcan0: tx address claim with dest, not broadcast
[  329.349187][T10943] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2214'.
[  329.550981][T10949] loop6: detected capacity change from 0 to 4096
[  329.579113][T10949] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  329.700573][T10949] ntfs3: loop6: ino=1b, "file0" directory corrupted
[  329.838059][ T5710] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  330.048302][ T5710] usb 4-1: Using ep0 maxpacket: 8
[  330.064075][ T5710] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  330.108170][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.151789][ T5710] usb 4-1: Product: syz
[  330.156019][ T5710] usb 4-1: Manufacturer: syz
[  330.180821][ T5710] usb 4-1: SerialNumber: syz
[  330.204841][ T5710] usb 4-1: config 0 descriptor??
[  330.226649][ T5710] gspca_main: se401-2.14.0 probing 047d:5003
[  330.838141][ T7589] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  330.838345][ T5710] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30
[  330.976402][T10973] loop6: detected capacity change from 0 to 32768
[  331.028064][ T7589] usb 1-1: Using ep0 maxpacket: 16
[  331.035038][ T7589] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.058091][ T7589] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.070773][ T7589] usb 1-1: config 0 interface 0 has no altsetting 0
[  331.076312][T10973] XFS (loop6): Mounting V5 Filesystem
[  331.077459][ T7589] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  331.094384][ T7589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.113930][ T7589] usb 1-1: config 0 descriptor??
[  331.137224][T10935] usb 4-1: USB disconnect, device number 22
[  331.144376][T10985] use of bytesused == 0 is deprecated and will be removed in the future,
[  331.208523][T10985] use the actual size instead.
[  331.308478][T10973] XFS (loop6): Ending clean mount
[  331.336014][T10973] XFS (loop6): Quotacheck needed: Please wait.
[  331.423548][T10973] XFS (loop6): Quotacheck: Done.
[  331.549111][ T7589] hid (null): unknown global tag 0xe
[  331.652444][ T8291] XFS (loop6): Unmounting Filesystem
[  331.772595][T10935] usb 1-1: USB disconnect, device number 17
[  332.490445][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2242'.
[  333.061904][T11038] loop6: detected capacity change from 0 to 1024
[  333.149844][T10935] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  333.359245][T11043] pim6reg0: tun_chr_ioctl cmd 2147767521
[  333.366737][T10935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.388224][T10935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.412883][T10935] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  333.445935][T10935] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  333.462221][T10935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.483094][T10935] usb 1-1: config 0 descriptor??
[  333.758432][T11049] user requested TSC rate below hardware speed
[  333.926445][T10935] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xe
[  333.946673][T10935] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  333.999050][T10935] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  334.137700][ T4314] usb 1-1: USB disconnect, device number 18
[  334.150175][ T4315] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  334.233780][T11058] fido_id[11058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  334.360889][ T4315] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  334.386509][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.394455][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'.
[  334.412659][ T4315] usb 7-1: config 0 descriptor??
[  334.428158][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'.
[  334.436517][ T4315] gspca_main: sunplus-2.14.0 probing 055f:c420
[  334.447163][T11063] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.456289][T11063] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.465056][T11063] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.473803][T11063] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  334.538214][T11052] loop4: detected capacity change from 0 to 40427
[  334.571835][T11052] F2FS-fs (loop4): invalid crc value
[  334.593501][T11052] F2FS-fs (loop4): Found nat_bits in checkpoint
[  334.696689][T11052] F2FS-fs (loop4): Start checkpoint disabled!
[  334.709418][T11052] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  334.813288][T11052] F2FS-fs (loop4): Unexpected flush for atomic writes: ino=10, npages=16
[  334.857550][T11052] syz.4.2258: attempt to access beyond end of device
[  334.857550][T11052] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  335.150524][   T11] kworker/u4:1: attempt to access beyond end of device
[  335.150524][   T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  335.255169][ T4315] gspca_sunplus: reg_w_riv err -71
[  335.265291][ T4315] sunplus: probe of 7-1:0.0 failed with error -71
[  335.290163][ T4315] usb 7-1: USB disconnect, device number 6
[  335.645350][T11078] tipc: Started in network mode
[  335.666770][T11078] tipc: Node identity , cluster identity 4711
[  336.181084][ T5710] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  336.193912][T11098] Failed to get privilege flags for destination (handle=0x2:0x1)
[  336.242646][T11100] netlink: 1060 bytes leftover after parsing attributes in process `syz.1.2277'.
[  336.252232][T11100] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  336.278070][ T4315] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  336.379840][ T5710] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  336.391142][ T5710] usb 5-1: config 0 has no interface number 0
[  336.397250][ T5710] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.409465][ T5710] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.419491][ T5710] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  336.430350][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.440703][ T5710] usb 5-1: config 0 descriptor??
[  336.468199][ T4315] usb 7-1: Using ep0 maxpacket: 32
[  336.476098][ T4315] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  336.484703][ T4315] usb 7-1: config 0 has no interface number 0
[  336.493731][ T4315] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  336.503087][ T4315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.511294][ T4315] usb 7-1: Product: syz
[  336.515669][ T4315] usb 7-1: Manufacturer: syz
[  336.524141][ T4315] usb 7-1: SerialNumber: syz
[  336.537920][ T4315] usb 7-1: config 0 descriptor??
[  336.545552][ T4315] smsc95xx v2.0.0
[  336.861311][ T5710] uclogic 0003:256C:006D.0013: unknown main item tag 0x0
[  336.876843][ T5710] uclogic 0003:256C:006D.0013: unknown main item tag 0x0
[  336.898925][ T5710] uclogic 0003:256C:006D.0013: unknown main item tag 0x0
[  336.906032][ T5710] uclogic 0003:256C:006D.0013: unknown main item tag 0x0
[  336.938017][ T5710] uclogic 0003:256C:006D.0013: unknown main item tag 0x0
[  336.945654][ T5710] uclogic 0003:256C:006D.0013: No inputs registered, leaving
[  336.967814][ T5710] uclogic 0003:256C:006D.0013: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1
[  337.087630][ T5710] usb 5-1: USB disconnect, device number 25
[  337.231877][T11114] fido_id[11114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  337.356986][ T4315] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  337.378019][ T4315] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  337.398843][ T4315] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  337.426782][ T4315] smsc95xx: probe of 7-1:0.67 failed with error -71
[  337.455762][ T4315] usb 7-1: USB disconnect, device number 7
[  338.923675][T11155] loop6: detected capacity change from 0 to 512
[  338.947729][T11155] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  339.000304][T11155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002]
[  339.073346][T11155] System zones: 1-12
[  339.077883][T11155] EXT4-fs (loop6): orphan cleanup on readonly fs
[  339.086933][T11155] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2302: invalid indirect mapped block 12 (level 1)
[  339.128222][T11155] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2302: invalid indirect mapped block 2 (level 2)
[  339.142298][T11155] EXT4-fs (loop6): 1 truncate cleaned up
[  339.148083][T11155] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  339.238398][ T8291] EXT4-fs (loop6): unmounting filesystem.
[  339.398105][ T4316] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  339.492503][ T4317] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  339.561325][T11174] loop6: detected capacity change from 0 to 2048
[  339.583335][ T4316] usb 2-1: Using ep0 maxpacket: 32
[  339.590929][ T4316] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  339.605366][T11174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.615507][ T4316] usb 2-1: config 0 has no interface number 0
[  339.630096][ T4316] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  339.658179][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[  339.666753][ T4316] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  339.683079][ T4316] usb 2-1: config 0 interface 85 has no altsetting 0
[  339.690951][ T4317] usb 5-1: Using ep0 maxpacket: 16
[  339.700468][ T4316] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  339.710020][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.719194][ T4316] usb 2-1: Product: syz
[  339.723829][ T4317] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  339.734728][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.743055][ T4316] usb 2-1: Manufacturer: syz
[  339.747760][ T4316] usb 2-1: SerialNumber: syz
[  339.757878][ T4317] usb 5-1: Product: syz
[  339.765191][ T4316] usb 2-1: config 0 descriptor??
[  339.775716][ T4317] usb 5-1: Manufacturer: syz
[  339.781117][ T4317] usb 5-1: SerialNumber: syz
[  339.794635][ T4317] r8152-cfgselector 5-1: config 0 descriptor??
[  340.012358][ T4317] r8152-cfgselector 5-1: Unknown version 0x0000
[  340.199192][ T4316] appletouch 2-1:0.85: Geyser mode initialized.
[  340.220110][ T4316] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input31
[  340.231275][ T4317] r8152-cfgselector 5-1: Unknown version 0x0000
[  340.241302][ T4317] r8152-cfgselector 5-1: USB disconnect, device number 26
[  340.446418][ T4316] usb 2-1: USB disconnect, device number 23
[  340.487178][ T4316] appletouch 2-1:0.85: input: appletouch disconnected
[  340.624302][T11191] loop6: detected capacity change from 0 to 2048
[  340.680010][T11192] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  340.777037][T11192] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  340.803604][T11192] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  340.832341][T11192] Remounting filesystem read-only
[  340.842379][T11197] loop4: detected capacity change from 0 to 1024
[  340.868093][ T5716] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  340.891954][ T8291] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  341.053880][ T4337] hfsplus: b-tree write err: -5, ino 25
[  341.059099][ T4314] kernel write not supported for file /zero (pid: 4314 comm: kworker/0:3)
[  341.059917][ T4337] hfsplus: b-tree write err: -5, ino 4
[  341.082369][ T5716] usb 1-1: Using ep0 maxpacket: 8
[  341.097522][ T5716] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  341.128254][ T4337] hfsplus: b-tree write err: -5, ino 2
[  341.132814][ T5716] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  341.153518][ T4337] hfsplus: b-tree write err: -5, ino 26
[  341.182773][ T5716] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  341.208289][ T5716] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  341.268697][ T5716] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  341.318082][ T5716] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  341.347896][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.492412][T11214] input: syz1 as /devices/virtual/input/input32
[  341.571796][ T5716] usb 1-1: GET_CAPABILITIES returned 0
[  341.577330][ T5716] usbtmc 1-1:16.0: can't read capabilities
[  341.815498][ T4317] usb 1-1: USB disconnect, device number 19
[  341.874170][T11225] x_tables: duplicate entry at hook 3
[  342.212600][T11205] loop6: detected capacity change from 0 to 40427
[  342.257240][T11205] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  342.289197][T11205] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  342.324384][T11205] F2FS-fs (loop6): invalid crc value
[  342.371701][T11205] F2FS-fs (loop6): Found nat_bits in checkpoint
[  342.535537][T11205] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  342.548632][T11205] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  342.589043][T11247] program syz.0.2342 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  343.044364][T11258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2347'.
[  344.182088][ T4314] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  344.209298][ T4315] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  344.383806][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.405182][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.415793][ T4315] usb 7-1: Using ep0 maxpacket: 16
[  344.430101][ T4315] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  344.463523][ T4315] usb 7-1: config 0 has no interface number 0
[  344.470493][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.487829][T11282] loop4: detected capacity change from 0 to 40427
[  344.493823][ T4315] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  344.507926][ T4314] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.530790][ T4315] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  344.532984][T11282] F2FS-fs (loop4): invalid crc value
[  344.541395][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.563764][ T4315] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  344.575069][ T4315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.587442][ T4315] usb 7-1: Product: syz
[  344.596588][ T4315] usb 7-1: Manufacturer: syz
[  344.596669][ T4314] usb 1-1: config 0 descriptor??
[  344.606940][ T4315] usb 7-1: SerialNumber: syz
[  344.609409][T11282] F2FS-fs (loop4): Found nat_bits in checkpoint
[  344.635081][ T4315] usb 7-1: config 0 descriptor??
[  344.643522][T11286] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  344.651249][T11286] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  344.751787][T11282] F2FS-fs (loop4): Start checkpoint disabled!
[  344.767035][T11282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  344.896706][T11286] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  344.920400][T11282] syz.4.2360: attempt to access beyond end of device
[  344.920400][T11282] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  344.938386][T11286] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  345.029574][ T4314] plantronics 0003:047F:FFFF.0014: unbalanced delimiter at end of report description
[  345.068654][ T4314] plantronics 0003:047F:FFFF.0014: parse failed
[  345.089065][ T4314] plantronics: probe of 0003:047F:FFFF.0014 failed with error -22
[  345.246351][   T11] kworker/u4:1: attempt to access beyond end of device
[  345.246351][   T11] loop4: rw=1, sector=77824, nr_sectors = 8 limit=40427
[  345.272747][T10935] usb 1-1: USB disconnect, device number 20
[  345.289266][   T11] kworker/u4:1: attempt to access beyond end of device
[  345.289266][   T11] loop4: rw=1, sector=77880, nr_sectors = 8 limit=40427
[  345.309233][ T4321] kworker/u4:5: attempt to access beyond end of device
[  345.309233][ T4321] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  345.370419][ T4315] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 32
[  345.580748][ T4315] usb 7-1: USB disconnect, device number 8
[  345.703166][T11309] loop4: detected capacity change from 0 to 4096
[  346.108050][ T4317] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  346.311277][ T4317] usb 4-1: Using ep0 maxpacket: 32
[  346.335957][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  346.373830][ T4317] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  346.415175][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  346.462370][ T4317] usb 4-1: Product: syz
[  346.466617][ T4317] usb 4-1: Manufacturer: syz
[  346.481738][ T4317] usb 4-1: SerialNumber: syz
[  346.506042][ T4317] usb 4-1: config 0 descriptor??
[  346.522752][T11335] loop4: detected capacity change from 0 to 64
[  346.531957][T11313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  346.545209][ T4317] hub 4-1:0.0: bad descriptor, ignoring hub
[  346.558060][ T4317] hub: probe of 4-1:0.0 failed with error -5
[  346.565094][T11335] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  346.975348][T11351] hugetlbfs: syz.1.2388 (11351): Using mlock ulimits for SHM_HUGETLB is obsolete
[  347.499735][ T4315] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  347.702836][ T4315] usb 2-1: Using ep0 maxpacket: 16
[  347.736820][ T4315] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.768088][ T4315] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.784341][ T4315] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  347.803941][ T4315] usb 2-1: config 0 interface 0 has no altsetting 0
[  347.848723][ T4315] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  347.857831][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.882218][ T4315] usb 2-1: config 0 descriptor??
[  348.148206][T10935] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  348.334677][ T4315] hid (null): unknown global tag 0xc
[  348.342236][T10935] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  348.358480][ T4315] hid (null): report_id 49667 is invalid
[  348.367553][T10935] usb 1-1: config 0 interface 0 has no altsetting 0
[  348.383548][ T4315] hid (null): global environment stack underflow
[  348.400186][T10935] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  348.434564][T10935] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  348.462333][T10935] usb 1-1: Product: syz
[  348.466545][T10935] usb 1-1: Manufacturer: syz
[  348.476552][T10935] usb 1-1: SerialNumber: syz
[  348.492131][T11397] loop4: detected capacity change from 0 to 512
[  348.495492][T10935] usb 1-1: config 0 descriptor??
[  348.538588][T11397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  348.556213][T10935] usb 1-1: selecting invalid altsetting 0
[  348.602591][T11397] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.2408: corrupted xattr entries
[  348.616070][ T4315] usb 2-1: USB disconnect, device number 24
[  348.625963][T11397] EXT4-fs (loop4): 1 truncate cleaned up
[  348.632501][T11397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  348.751931][T11397] EXT4-fs (loop4): shut down requested (1)
[  348.788581][ T4317] usb 1-1: USB disconnect, device number 21
[  348.926992][ T4315] usb 4-1: USB disconnect, device number 23
[  348.966405][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  349.097092][T11408] loop6: detected capacity change from 0 to 128
[  350.187793][T11439] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  350.394262][T11445] loop4: detected capacity change from 0 to 512
[  350.417840][T11445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  350.523635][T11445] EXT4-fs (loop4): 1 truncate cleaned up
[  350.531472][T11445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  350.665794][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  350.669943][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'.
[  350.901135][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'.
[  350.919432][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'.
[  350.969458][T11459] loop6: detected capacity change from 0 to 4096
[  351.045145][T11459] NILFS (loop6): invalid segment: Checksum error in segment payload
[  351.073825][T11459] NILFS (loop6): trying rollback from an earlier position
[  351.089978][ T4317] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  351.138244][T11459] NILFS (loop6): recovery complete
[  351.148682][T11471] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  351.288144][ T4317] usb 5-1: Using ep0 maxpacket: 32
[  351.305237][ T4317] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  351.345043][ T4317] usb 5-1: config 0 has no interface number 0
[  351.375418][ T4317] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  351.421733][ T4317] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  351.461604][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.503432][ T4317] usb 5-1: Product: syz
[  351.507653][ T4317] usb 5-1: Manufacturer: syz
[  351.541056][ T4317] usb 5-1: SerialNumber: syz
[  351.575388][ T4317] usb 5-1: config 0 descriptor??
[  351.593857][T11456] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  351.823482][T11456] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  351.834575][T11489] loop6: detected capacity change from 0 to 256
[  351.937479][T11489] FAT-fs (loop6): Directory bread(block 64) failed
[  351.964615][T11489] FAT-fs (loop6): Directory bread(block 65) failed
[  351.984894][T11489] FAT-fs (loop6): Directory bread(block 66) failed
[  352.005142][T11489] FAT-fs (loop6): Directory bread(block 67) failed
[  352.024850][T11489] FAT-fs (loop6): Directory bread(block 68) failed
[  352.037280][T11489] FAT-fs (loop6): Directory bread(block 69) failed
[  352.056413][T11489] FAT-fs (loop6): Directory bread(block 70) failed
[  352.064062][T11489] FAT-fs (loop6): Directory bread(block 71) failed
[  352.091590][T11489] FAT-fs (loop6): Directory bread(block 72) failed
[  352.101197][T11489] FAT-fs (loop6): Directory bread(block 73) failed
[  352.257014][ T4317] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  352.287869][ T4317] asix: probe of 5-1:0.188 failed with error -71
[  352.310226][ T4317] usb 5-1: USB disconnect, device number 27
[  354.794569][T11570] loop6: detected capacity change from 0 to 128
[  354.830301][T11570] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  355.008217][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  355.291304][T11578] loop6: detected capacity change from 0 to 8192
[  355.388663][T11578] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  355.418873][T11578] FAT-fs (loop6): Filesystem has been set read-only
[  355.458219][ T4317] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  355.484404][T11573] loop4: detected capacity change from 0 to 40427
[  355.525368][T11573] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  355.533791][T11573] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  355.546370][T11573] F2FS-fs (loop4): Found nat_bits in checkpoint
[  355.587787][T11573] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  355.595824][T11573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  355.654178][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.681559][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.721953][ T4317] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  355.732230][ T4287] syz-executor: attempt to access beyond end of device
[  355.732230][ T4287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  355.758225][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.787917][ T4317] usb 4-1: config 0 descriptor??
[  356.437372][ T4317] hid-led 0003:1D34:000A.0016: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0
[  356.481164][ T4317] hid-led 0003:1D34:000A.0016: Dream Cheeky Webmail Notifier initialized
[  356.489855][ T5716] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  356.653120][T11607] netlink: 'syz.6.2500': attribute type 2 has an invalid length.
[  356.693514][ T4317] usb 4-1: USB disconnect, device number 24
[  356.702578][ T5716] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  356.734246][ T5716] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  356.748210][ T5716] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  356.757854][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.183094][ T5716] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  357.195548][ T5716] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input34
[  357.224546][ T5716] input: failed to attach handler kbd to device input34, error: -5
[  357.276693][ T5716] usb 5-1: USB disconnect, device number 28
[  357.850026][T11645] loop4: detected capacity change from 0 to 512
[  358.865131][T11652] loop4: detected capacity change from 0 to 40427
[  358.902237][T11652] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  358.939039][T11652] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  358.972051][T11652] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff
[  358.998065][T11652] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  359.040676][T11652] F2FS-fs (loop4): invalid crc value
[  359.080657][T11652] F2FS-fs (loop4): Found nat_bits in checkpoint
[  359.213588][T11652] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  359.226149][T11652] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  359.332740][ T4287] syz-executor: attempt to access beyond end of device
[  359.332740][ T4287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  359.580608][ T4315] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  359.705805][T11689] loop4: detected capacity change from 0 to 128
[  359.768071][ T4315] usb 7-1: Using ep0 maxpacket: 8
[  359.775943][ T4315] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  359.792477][ T4315] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  359.818386][ T4315] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  359.845081][ T4315] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  359.886184][ T4315] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  359.924478][ T4315] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  359.948092][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.103457][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'.
[  360.180512][ T4315] usb 7-1: GET_CAPABILITIES returned 0
[  360.186062][ T4315] usbtmc 7-1:16.0: can't read capabilities
[  360.435768][T11681] usbtmc 7-1:16.0: usbtmc488_ioctl_trigger returned -71
[  360.446441][ T4317] usb 7-1: USB disconnect, device number 9
[  361.851656][T11756] program syz.3.2566 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  362.423892][T11786] Set syz1 is full, maxelem 0 reached
[  362.478429][T10935] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  362.542728][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2580'.
[  362.552181][T11791] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2580'.
[  362.564301][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2580'.
[  362.574412][T11791] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2580'.
[  362.628092][ T4316] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  362.668224][T10935] usb 7-1: Using ep0 maxpacket: 16
[  362.682381][T10935] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.713369][T10935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  362.740404][T10935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  362.776066][T10935] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  362.795310][T10935] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.817020][T10935] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  362.830674][T10935] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  362.840127][T10935] usb 7-1: Manufacturer: syz
[  362.848186][ T4316] usb 5-1: Using ep0 maxpacket: 32
[  362.855277][ T4316] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  362.865417][T10935] usb 7-1: config 0 descriptor??
[  362.880274][ T4316] usb 5-1: config 0 has no interface number 0
[  362.913897][ T4316] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  362.940920][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.958173][ T4316] usb 5-1: Product: syz
[  362.973926][ T4316] usb 5-1: Manufacturer: syz
[  362.988898][ T4316] usb 5-1: SerialNumber: syz
[  363.019028][ T4316] usb 5-1: config 0 descriptor??
[  363.031644][ T4316] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  363.237602][ T4316] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  363.267286][ T4316] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  363.298200][T10935] rc_core: IR keymap rc-hauppauge not found
[  363.304154][T10935] Registered IR keymap rc-empty
[  363.335125][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.369221][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.428184][T10935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  363.452877][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.467166][T10935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input35
[  363.482795][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.504268][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.541050][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.578233][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.618138][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.648215][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.678154][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.703025][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  363.708246][ T4314] usb 5-1: USB disconnect, device number 29
[  363.718368][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.741671][ T4314] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  363.755506][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.787733][ T4314] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  363.808389][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.820458][ T4314] quatech2 5-1:0.51: device disconnected
[  363.848118][T10935] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.879585][T10935] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  363.898030][T10935] mceusb 7-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[  363.937229][T10935] usb 7-1: USB disconnect, device number 10
[  364.494161][T11834] netlink: 'syz.1.2599': attribute type 34 has an invalid length.
[  364.823239][T11846] loop4: detected capacity change from 0 to 2048
[  364.884127][T11846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.949482][T11845] UDF-fs: error (device loop4): udf_truncate_tail_extent: Extent after EOF in inode 1367
[  365.518170][ T7589] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  365.709798][ T7589] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64
[  365.725608][ T7589] usb 5-1: config 0 interface 0 has no altsetting 0
[  365.745998][ T7589] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  365.768049][ T7589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.801238][ T7589] usb 5-1: config 0 descriptor??
[  365.806850][T11862] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  365.859491][T11880] vcan0: tx drop: invalid da for name 0x00000000000000f0
[  366.067044][T11885] ubi31: attaching mtd0
[  366.094437][T11885] ubi31 error: ubi_attach_mtd_dev: bad VID header (32769) or data offsets (32833)
[  366.109694][ T4316] kernel write not supported for file /1291/clear_refs (pid: 4316 comm: kworker/1:5)
[  366.243234][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.270336][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.277102][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.318171][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[  366.328043][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.334852][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.338097][   T56] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[  366.352133][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.357196][T11893] loop6: detected capacity change from 0 to 512
[  366.365959][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.374747][T11893] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  366.426807][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.454307][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.477451][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.494536][ T7589] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0
[  366.509889][ T7589] lua 0003:1E7D:2C2E.0017: item fetching failed at offset 11/13
[  366.532135][ T7589] lua 0003:1E7D:2C2E.0017: parse failed
[  366.542207][ T7589] lua: probe of 0003:1E7D:2C2E.0017 failed with error -22
[  366.566217][ T7589] usb 5-1: USB disconnect, device number 30
[  366.804500][T11902] loop6: detected capacity change from 0 to 256
[  366.821974][T11902] exfat: Deprecated parameter 'utf8'
[  366.827373][T11902] exfat: Deprecated parameter 'namecase'
[  366.867784][T11902] exfat: Deprecated parameter 'namecase'
[  366.882839][T11902] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d)
[  367.163899][T11918] tap0: tun_chr_ioctl cmd 1074025673
[  368.368385][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  368.657057][T11959] loop4: detected capacity change from 0 to 32768
[  368.765514][T11959] XFS (loop4): Mounting V5 Filesystem
[  368.847139][T11959] XFS (loop4): Ending clean mount
[  368.938483][ T4316] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  369.003839][ T4287] XFS (loop4): Unmounting Filesystem
[  369.141282][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short
[  369.160132][ T4316] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  369.200338][ T4316] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  369.244270][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.274665][ T4316] usb 4-1: Product: syz
[  369.284805][ T4316] usb 4-1: Manufacturer: syz
[  369.298054][ T4316] usb 4-1: SerialNumber: syz
[  369.540213][ T4316] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  369.755457][ T4316] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  369.774310][ T4316] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  370.163649][ T4316] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  370.205384][ T4316] usb 4-1: USB disconnect, device number 25
[  370.478311][ T4896] udevd[4896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.348099][ T4316] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  371.538068][ T4316] usb 2-1: Using ep0 maxpacket: 8
[  371.545018][ T4316] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  371.585372][ T4316] usb 2-1: config 179 has no interface number 0
[  371.609769][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  371.658036][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  371.703527][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  371.738115][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  371.767102][ T4316] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  371.818293][ T4316] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  371.827474][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.850649][T12060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  371.864312][T12090] loop4: detected capacity change from 0 to 128
[  371.914336][T12091] delete_channel: no stack
[  372.080508][ T4316] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input37
[  372.291851][ T5716] usb 2-1: USB disconnect, device number 25
[  372.298071][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  372.298118][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  372.349009][ T5716] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  372.461793][T12102] netlink: 'syz.4.2711': attribute type 2 has an invalid length.
[  372.493117][T12102] netlink: 'syz.4.2711': attribute type 8 has an invalid length.
[  372.519994][T12102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2711'.
[  372.583661][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'.
[  372.583674][T12105] netlink: 'syz.4.2711': attribute type 2 has an invalid length.
[  372.583690][T12105] netlink: 'syz.4.2711': attribute type 8 has an invalid length.
[  372.618284][T12105] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2711'.
[  373.058888][T12118] loop4: detected capacity change from 0 to 512
[  373.094622][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  373.122046][T12118] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.2718: corrupted in-inode xattr
[  373.166284][T12113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.212862][T12118] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2718: couldn't read orphan inode 15 (err -117)
[  373.243073][T12118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  373.349571][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  373.403353][ T4287] EXT4-fs error (device loop4): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  373.424855][T12115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.518259][ T4287] EXT4-fs error (device loop4): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  374.394902][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  374.756762][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.054136][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.391450][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.025231][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.241476][T12148] IPv6: NLM_F_REPLACE set, but no existing node found!
[  377.200369][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.221086][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.230704][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.268239][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.275816][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  377.285669][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.408012][ T4315] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  378.530606][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  378.536945][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  378.599717][ T4315] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  378.619633][ T4315] usb 4-1: config 0 has no interface number 0
[  378.637002][ T4315] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  378.708034][ T4315] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  378.748030][ T4315] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  378.793347][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.839879][ T4315] usb 4-1: config 0 descriptor??
[  378.865102][T12186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  378.892650][ T4315] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  379.054415][T12166] chnl_net:caif_netlink_parms(): no params data found
[  379.145717][ T4315] usb 4-1: USB disconnect, device number 26
[  379.328134][   T48] Bluetooth: hci4: command 0x0409 tx timeout
[  379.643904][T12220] loop6: detected capacity change from 0 to 4096
[  379.676998][T12220] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  379.911790][T12166] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.928283][T12166] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.951285][T12227] ntfs3: loop6: ntfs3_write_inode r=1e failed, -22.
[  379.967863][T12166] device bridge_slave_0 entered promiscuous mode
[  380.011874][T12166] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.030482][T12166] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.084214][T12166] device bridge_slave_1 entered promiscuous mode
[  380.123522][   T11] device hsr_slave_0 left promiscuous mode
[  380.169317][   T11] device hsr_slave_1 left promiscuous mode
[  380.179120][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.186576][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.267546][   T11] device bridge_slave_1 left promiscuous mode
[  380.284949][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.394645][   T11] device veth1_macvtap left promiscuous mode
[  380.405357][   T11] device veth0_macvtap left promiscuous mode
[  380.418471][   T11] device veth1_vlan left promiscuous mode
[  380.432204][   T11] device veth0_vlan left promiscuous mode
[  381.425538][   T48] Bluetooth: hci4: command 0x041b tx timeout
[  381.465515][   T11] team0 (unregistering): Port device team_slave_1 removed
[  381.577494][   T11] team0 (unregistering): Port device team_slave_0 removed
[  381.656710][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.746238][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.419945][   T11] bond0 (unregistering): Released all slaves
[  382.597159][T12266] netlink: 'syz.3.2764': attribute type 3 has an invalid length.
[  382.612728][T12266] netlink: 812 bytes leftover after parsing attributes in process `syz.3.2764'.
[  382.646064][T12166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.704717][T12166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.737580][T12271] program syz.0.2767 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  382.834507][T12166] team0: Port device team_slave_0 added
[  382.842664][T12166] team0: Port device team_slave_1 added
[  382.927083][T12166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.937610][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.040144][T12166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.122312][T12166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.153421][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.247350][T12166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.488217][   T48] Bluetooth: hci4: command 0x040f tx timeout
[  383.513227][T12166] device hsr_slave_0 entered promiscuous mode
[  383.583800][T12166] device hsr_slave_1 entered promiscuous mode
[  383.601578][T12166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  383.615451][T12166] Cannot create hsr debugfs directory
[  384.178557][   T26] kauditd_printk_skb: 23 callbacks suppressed
[  384.178571][   T26] audit: type=1326 audit(2000000045.690:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.3.2776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac82b9ce59 code=0x0
[  384.208355][    C1] vkms_vblank_simulate: vblank timer overrun
[  384.357548][T12166] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  384.387308][T12166] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  384.430413][T12166] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  384.460686][T12166] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  384.724853][T12166] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.770520][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  384.790450][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  384.832631][T12166] 8021q: adding VLAN 0 to HW filter on device team0
[  384.866747][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  384.890157][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  384.907837][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.915093][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.981750][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  384.996697][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  385.038841][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  385.048246][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.055514][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.098431][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  385.145944][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  385.234878][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  385.254190][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  385.262927][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  385.277863][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  385.318811][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  385.348761][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  385.385372][T12166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  385.420525][T12166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  385.453416][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  385.462096][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  385.479539][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  385.579084][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[  386.449454][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.456997][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  386.529142][T12166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.798874][T12367] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2798'.
[  386.828084][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'.
[  387.033164][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2801'.
[  387.056057][T12379] netlink: 'syz.3.2800': attribute type 1 has an invalid length.
[  387.109874][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2800'.
[  387.895533][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  387.928872][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  387.980732][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  387.989986][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  388.008885][T12166] device veth0_vlan entered promiscuous mode
[  388.020259][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  388.029167][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  388.042266][T12166] device veth1_vlan entered promiscuous mode
[  388.091634][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  388.120449][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  388.150798][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  388.159206][ T4316] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  388.172014][T12385] loop6: detected capacity change from 0 to 32768
[  388.189289][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  388.223492][T12166] device veth0_macvtap entered promiscuous mode
[  388.231155][T12385] find_entry called with index >= next_index
[  388.237180][T12385] find_entry called with index >= next_index
[  388.277152][T12166] device veth1_macvtap entered promiscuous mode
[  388.294703][T12385] find_entry called with index >= next_index
[  388.328612][T12385] find_entry called with index >= next_index
[  388.345414][T12385] find_entry called with index >= next_index
[  388.353334][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.370639][ T4316] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  388.388011][T12385] add_index: next_index = 0.  Resetting!
[  388.390905][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.393827][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.423964][T12385] find_entry called with index >= next_index
[  388.434068][T12385] find_entry called with index >= next_index
[  388.452376][T12385] find_entry called with index >= next_index
[  388.455493][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.479549][ T4316] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  388.506094][ T4316] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  388.510960][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.538714][T12385] non-latin1 character 0x3ff found in JFS file name
[  388.545522][T12385] mount with iocharset=utf8 to access
[  388.548122][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.560509][ T4316] usb 4-1: Manufacturer: syz
[  388.587623][ T4316] usb 4-1: config 0 descriptor??
[  388.612746][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.643057][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.711491][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.776612][T12166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.798011][ T4316] rc_core: IR keymap rc-hauppauge not found
[  388.803989][ T4316] Registered IR keymap rc-empty
[  388.815486][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.852446][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.857290][ T4316] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  388.888024][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.909953][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.925567][ T4316] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38
[  388.957201][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.968470][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  389.013321][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.081626][T12166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.138028][T12166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.189446][T12166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.198395][ T4317] usb 4-1: USB disconnect, device number 27
[  389.242051][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  389.273854][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  389.315959][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  389.376651][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  389.402443][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  389.449133][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  389.501520][T12166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.543044][T12166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.563134][T12166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.602895][T12166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.917313][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.943276][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.988597][T12433] sg_read: process 1390 (syz.3.2816) changed security contexts after opening file descriptor, this is not allowed.
[  390.034492][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  390.076828][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.103852][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.151790][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  390.603215][T12440] IPVS: persistence engine module ip_vs_pe_ not found
[  391.093522][T12463] loop7: detected capacity change from 0 to 4096
[  391.149197][T12467] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  391.516848][T12166] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22.
[  391.565094][T12166] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  391.995931][T12486] loop6: detected capacity change from 0 to 4096
[  392.023548][T12486] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  392.167730][T12486] ntfs3: loop6: ntfs_set_state r=3 failed, -22.
[  392.248103][ T4314] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  392.295333][ T4337] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22.
[  392.308729][ T8291] ntfs3: loop6: ntfs_set_state r=3 failed, -22.
[  392.316199][ T8291] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  392.337098][ T8291] ntfs3: loop6: ntfs_set_state r=3 failed, -22.
[  392.364087][   T11] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22.
[  392.388551][ T8291] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  392.396823][ T8291] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22.
[  392.458286][ T4314] usb 8-1: Using ep0 maxpacket: 8
[  392.469783][ T4314] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  392.493132][ T4314] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  392.518290][ T4314] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  392.546368][ T4314] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  392.548788][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2845'.
[  392.583197][ T4314] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  392.617508][ T4314] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  392.644970][ T4314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.852181][T12520] loop6: detected capacity change from 0 to 256
[  392.880038][ T4314] usb 8-1: GET_CAPABILITIES returned 0
[  392.885670][ T4314] usbtmc 8-1:16.0: can't read capabilities
[  392.928721][T12520] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  393.028418][   T26] audit: type=1800 audit(2000000054.540:112): pid=12520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2847" name="file1" dev="loop6" ino=1048709 res=0 errno=0
[  393.082538][T12526] program syz.0.2850 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  393.109844][ T5716] usb 8-1: USB disconnect, device number 2
[  393.310413][T12531] program syz.3.2851 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  394.989040][T12582] device veth0_virt_wifi entered promiscuous mode
[  395.158102][ T5716] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  395.353259][ T5716] usb 4-1: Using ep0 maxpacket: 32
[  395.369682][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  395.397576][ T5716] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  395.440616][ T5716] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  395.471445][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.501803][ T5716] usb 4-1: Product: syz
[  395.506022][ T5716] usb 4-1: Manufacturer: syz
[  395.549217][ T5716] usb 4-1: SerialNumber: syz
[  395.579543][ T5716] usb 4-1: config 0 descriptor??
[  395.661825][T12610] program syz.1.2876 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  395.827828][ T5716] usb 4-1: USB disconnect, device number 28
[  395.871768][T12612] loop7: detected capacity change from 0 to 4096
[  395.959962][T12619] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  397.180162][T12645] overlayfs: filesystem on './file0' not supported as upperdir
[  397.516472][T12657] loop6: detected capacity change from 0 to 8192
[  397.551704][T12657] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  397.596184][T12657] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  397.611415][T12657] REISERFS (device loop6): using ordered data mode
[  397.631442][T12657] reiserfs: using flush barriers
[  397.651805][T12657] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  397.751283][T12657] REISERFS (device loop6): checking transaction log (loop6)
[  397.776464][T12657] REISERFS (device loop6): Using r5 hash to sort names
[  397.797854][T12657] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  398.318509][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2903'.
[  398.351920][T12683] device ip6gre1 entered promiscuous mode
[  398.374157][ T4314] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  398.386128][ T4314] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  398.398014][T10935] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  398.436281][ T7589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  398.608156][T10935] usb 8-1: Using ep0 maxpacket: 8
[  398.616922][T10935] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  398.644977][T10935] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.657847][T10935] usb 8-1: Product: syz
[  398.663488][T10935] usb 8-1: Manufacturer: syz
[  398.672400][T10935] usb 8-1: SerialNumber: syz
[  398.680162][T10935] usb 8-1: config 0 descriptor??
[  398.706510][T10935] gspca_main: se401-2.14.0 probing 047d:5003
[  398.723895][ T4314] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  399.110577][T10935] gspca_se401: Too many frame sizes
[  399.319809][T10935] usb 8-1: USB disconnect, device number 3
[  399.374107][T12706] loop6: detected capacity change from 0 to 1024
[  399.443926][T12706] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  399.488275][ T7589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  399.508246][ T4314] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  399.670943][ T8291] EXT4-fs (loop6): unmounting filesystem.
[  399.699680][ T4314] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64
[  399.726026][ T4314] usb 2-1: config 0 interface 0 has no altsetting 0
[  399.774676][ T4314] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  399.786374][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  399.831708][T12717] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2913'.
[  399.834288][ T4314] usb 2-1: Product: syz
[  399.878387][ T4314] usb 2-1: Manufacturer: syz
[  399.883035][ T4314] usb 2-1: SerialNumber: syz
[  399.906489][ T4314] usb 2-1: config 0 descriptor??
[  399.916168][ T4314] usb 2-1: selecting invalid altsetting 0
[  400.258501][ T7589] usb 2-1: USB disconnect, device number 26
[  400.577151][T12733] loop5: detected capacity change from 0 to 7
[  400.620107][ T4896] Dev loop5: unable to read RDB block 7
[  400.625922][ T4896]  loop5: unable to read partition table
[  400.651049][ T4896] loop5: partition table beyond EOD, truncated
[  400.956951][T12725] loop6: detected capacity change from 0 to 131072
[  400.965366][T12725] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  400.973642][T12725] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  400.984842][T12725] F2FS-fs (loop6): invalid crc value
[  401.067784][T12725] F2FS-fs (loop6): Found nat_bits in checkpoint
[  401.068741][T12733] Dev loop5: unable to read RDB block 7
[  401.107601][T12725] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  401.115285][T12725] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  401.152054][T12733]  loop5: unable to read partition table
[  401.158358][T12733] loop5: partition table beyond EOD, truncated
[  401.164748][T12733] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  401.863636][ T7589] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  402.083319][ T7589] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  402.125141][ T7589] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 255, setting to 64
[  402.165323][ T7589] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  402.189630][ T7589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.229578][T12758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  402.254576][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2937'.
[  402.368174][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  402.995352][ T4286] Bluetooth: hci3: adv larger than maximum supported
[  402.995444][ T4286] Bluetooth: hci3: Unknown advertising packet type: 0x2540
[  403.004102][ T4286] Bluetooth: hci3: Malformed LE Event: 0x0d
[  403.296494][ T7589] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  403.312229][ T7589] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input39
[  403.358376][T12792] loop7: detected capacity change from 0 to 32768
[  403.414430][T12792] 
[  403.414430][T12792]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  403.414430][T12792] 
[  403.434502][ T7589] usb 2-1: USB disconnect, device number 27
[  403.440805][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  403.493640][T12792] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  403.493640][T12792] 
[  403.550219][T12792] xtLookup: xtSearch returned -5
[  403.815214][T12792] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  403.815214][T12792] 
[  403.858310][T12792] xtLookup: xtSearch returned -5
[  403.888702][T12792] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  403.888702][T12792] 
[  404.071812][   T34] 
[  404.071812][   T34]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.071812][   T34] 
[  404.107533][   T34] 
[  404.107533][   T34]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.107533][   T34] 
[  404.149147][T12166] 
[  404.149147][T12166]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.149147][T12166] 
[  404.182943][T12166] 
[  404.182943][T12166]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.182943][T12166] 
[  404.212609][  T107] 
[  404.212609][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.212609][  T107] 
[  404.242505][T12824] loop6: detected capacity change from 0 to 1024
[  404.284361][  T107] ==================================================================
[  404.292473][  T107] BUG: KASAN: use-after-free in txEnd+0x329/0x520
[  404.298917][  T107] Write of size 8 at addr ffff888027e9b040 by task jfsCommit/107
[  404.306646][  T107] 
[  404.308998][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0
[  404.316202][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  404.326280][  T107] Call Trace:
[  404.329579][  T107]  <TASK>
[  404.332522][  T107]  dump_stack_lvl+0x188/0x24e
[  404.337229][  T107]  ? read_lock_is_recursive+0x10/0x10
[  404.342624][  T107]  ? show_regs_print_info+0x12/0x12
[  404.347837][  T107]  ? load_image+0x400/0x400
[  404.352357][  T107]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  404.357835][  T107]  ? __virt_addr_valid+0x188/0x540
[  404.362973][  T107]  ? __virt_addr_valid+0x465/0x540
[  404.368105][  T107]  ? txEnd+0x329/0x520
[  404.372195][  T107]  print_report+0xa8/0x210
[  404.376645][  T107]  kasan_report+0x10b/0x140
[  404.381175][  T107]  ? mutex_unlock+0x10/0x10
[  404.385704][  T107]  ? txEnd+0x329/0x520
[  404.389969][  T107]  kasan_check_range+0x235/0x290
[  404.394929][  T107]  txEnd+0x329/0x520
[  404.398843][  T107]  jfs_lazycommit+0x5a0/0xa70
[  404.403549][  T107]  ? txFreelock+0x5a0/0x5a0
[  404.408068][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  404.413981][  T107]  ? do_task_dead+0xd0/0xd0
[  404.418514][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  404.424429][  T107]  ? __kthread_parkme+0x162/0x1c0
[  404.429479][  T107]  kthread+0x29d/0x330
[  404.433562][  T107]  ? txFreelock+0x5a0/0x5a0
[  404.438060][  T107]  ? kthread_blkcg+0xd0/0xd0
[  404.442638][  T107]  ret_from_fork+0x1f/0x30
[  404.447052][  T107]  </TASK>
[  404.450062][  T107] 
[  404.452370][  T107] Allocated by task 12792:
[  404.456768][  T107]  kasan_set_track+0x4b/0x70
[  404.461352][  T107]  __kasan_kmalloc+0x8e/0xa0
[  404.465937][  T107]  lmLogOpen+0x2c0/0xf90
[  404.470170][  T107]  jfs_mount_rw+0xf8/0x5c0
[  404.474580][  T107]  jfs_fill_super+0x594/0xad0
[  404.479249][  T107]  mount_bdev+0x287/0x3c0
[  404.483580][  T107]  legacy_get_tree+0xe6/0x180
[  404.488245][  T107]  vfs_get_tree+0x88/0x270
[  404.492653][  T107]  do_new_mount+0x24a/0xa40
[  404.497146][  T107]  __se_sys_mount+0x2e3/0x3d0
[  404.501815][  T107]  do_syscall_64+0x4c/0xa0
[  404.506274][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  404.512263][  T107] 
[  404.514576][  T107] Freed by task 12166:
[  404.518626][  T107]  kasan_set_track+0x4b/0x70
[  404.523245][  T107]  kasan_save_free_info+0x2d/0x50
[  404.528260][  T107]  ____kasan_slab_free+0x126/0x1e0
[  404.533364][  T107]  slab_free_freelist_hook+0x131/0x1a0
[  404.538806][  T107]  __kmem_cache_free+0xb6/0x1f0
[  404.543642][  T107]  lmLogClose+0x293/0x520
[  404.547961][  T107]  jfs_umount+0x28f/0x360
[  404.552282][  T107]  jfs_put_super+0x88/0x190
[  404.556771][  T107]  generic_shutdown_super+0x130/0x340
[  404.562133][  T107]  kill_block_super+0x7c/0xe0
[  404.566798][  T107]  deactivate_locked_super+0x93/0xf0
[  404.572068][  T107]  cleanup_mnt+0x42c/0x4b0
[  404.576470][  T107]  task_work_run+0x1d0/0x260
[  404.581049][  T107]  exit_to_user_mode_loop+0xe6/0x110
[  404.586325][  T107]  exit_to_user_mode_prepare+0xee/0x180
[  404.591868][  T107]  syscall_exit_to_user_mode+0x16/0x40
[  404.597410][  T107]  do_syscall_64+0x58/0xa0
[  404.601821][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  404.607790][  T107] 
[  404.610100][  T107] Last potentially related work creation:
[  404.615797][  T107]  kasan_save_stack+0x3a/0x60
[  404.620463][  T107]  __kasan_record_aux_stack+0xb2/0xc0
[  404.625820][  T107]  kvfree_call_rcu+0x103/0x870
[  404.630577][  T107]  neigh_flush_dev+0x177/0xa80
[  404.635326][  T107]  __neigh_ifdown+0x3d/0x460
[  404.639915][  T107]  neigh_ifdown+0x1b/0x30
[  404.644250][  T107]  rt6_disable_ip+0x7a3/0x810
[  404.648947][  T107]  addrconf_ifdown+0x16e/0x1a50
[  404.653793][  T107]  addrconf_notify+0x405/0xf40
[  404.658550][  T107]  raw_notifier_call_chain+0xcb/0x160
[  404.663917][  T107]  dev_close_many+0x2a5/0x410
[  404.668581][  T107]  unregister_netdevice_many_notify+0x491/0x19c0
[  404.674900][  T107]  default_device_exit_batch+0x9ea/0xa80
[  404.680519][  T107]  cleanup_net+0x791/0xba0
[  404.684930][  T107]  process_one_work+0x8a2/0x1160
[  404.689860][  T107]  worker_thread+0xaa2/0x1270
[  404.694533][  T107]  kthread+0x29d/0x330
[  404.698625][  T107]  ret_from_fork+0x1f/0x30
[  404.703034][  T107] 
[  404.705348][  T107] Second to last potentially related work creation:
[  404.712004][  T107]  kasan_save_stack+0x3a/0x60
[  404.716683][  T107]  __kasan_record_aux_stack+0xb2/0xc0
[  404.722041][  T107]  insert_work+0x54/0x3c0
[  404.726370][  T107]  __queue_work+0xba3/0xfb0
[  404.730870][  T107]  queue_work_on+0x124/0x1f0
[  404.735451][  T107]  p9_fd_request+0x299/0x4a0
[  404.740034][  T107]  p9_client_rpc+0x2b7/0xa50
[  404.744612][  T107]  p9_client_create+0x9ad/0x1070
[  404.749537][  T107]  v9fs_session_init+0x1f9/0x1860
[  404.754550][  T107]  v9fs_mount+0xcc/0xb50
[  404.758782][  T107]  legacy_get_tree+0xe6/0x180
[  404.763453][  T107]  vfs_get_tree+0x88/0x270
[  404.767859][  T107]  do_new_mount+0x24a/0xa40
[  404.772353][  T107]  __se_sys_mount+0x2e3/0x3d0
[  404.777015][  T107]  do_syscall_64+0x4c/0xa0
[  404.781435][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  404.787406][  T107] 
[  404.789720][  T107] The buggy address belongs to the object at ffff888027e9b000
[  404.789720][  T107]  which belongs to the cache kmalloc-1k of size 1024
[  404.803758][  T107] The buggy address is located 64 bytes inside of
[  404.803758][  T107]  1024-byte region [ffff888027e9b000, ffff888027e9b400)
[  404.817020][  T107] 
[  404.819332][  T107] The buggy address belongs to the physical page:
[  404.825738][  T107] page:ffffea00009fa600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27e98
[  404.835874][  T107] head:ffffea00009fa600 order:3 compound_mapcount:0 compound_pincount:0
[  404.844182][  T107] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  404.852157][  T107] raw: 00fff00000010200 ffffea000159aa00 dead000000000002 ffff888017441dc0
[  404.860730][  T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  404.869292][  T107] page dumped because: kasan: bad access detected
[  404.875694][  T107] page_owner tracks the page as allocated
[  404.881389][  T107] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4272, tgid 4272 (syz-executor), ts 67379692529, free_ts 67325123027
[  404.902738][  T107]  post_alloc_hook+0x173/0x1a0
[  404.907503][  T107]  get_page_from_freelist+0x1a1e/0x1ab0
[  404.913041][  T107]  __alloc_pages+0x1ec/0x4f0
[  404.917620][  T107]  alloc_slab_page+0x5d/0x160
[  404.922282][  T107]  new_slab+0x87/0x2c0
[  404.926343][  T107]  ___slab_alloc+0xbc6/0x1240
[  404.931008][  T107]  __kmem_cache_alloc_node+0x1a0/0x260
[  404.936451][  T107]  __kmalloc_node_track_caller+0x9e/0x230
[  404.942167][  T107]  __alloc_skb+0x22a/0x7e0
[  404.946571][  T107]  rtmsg_fib+0xe7/0x4b0
[  404.950715][  T107]  fib_table_insert+0xd7b/0x1b20
[  404.955640][  T107]  fib_magic+0x2e1/0x3c0
[  404.959870][  T107]  fib_add_ifaddr+0x389/0x5e0
[  404.964531][  T107]  fib_netdev_event+0x361/0x470
[  404.969375][  T107]  raw_notifier_call_chain+0xcb/0x160
[  404.974737][  T107]  __dev_notify_flags+0x1a6/0x310
[  404.979747][  T107] page last free stack trace:
[  404.984403][  T107]  free_unref_page_prepare+0x8b4/0x9a0
[  404.989855][  T107]  free_unref_page+0x2e/0x3f0
[  404.994519][  T107]  __unfreeze_partials+0x1a5/0x200
[  404.999631][  T107]  put_cpu_partial+0x17c/0x250
[  405.004397][  T107]  qlist_free_all+0x76/0xe0
[  405.008905][  T107]  kasan_quarantine_reduce+0x144/0x160
[  405.014360][  T107]  __kasan_slab_alloc+0x1e/0x80
[  405.019216][  T107]  slab_post_alloc_hook+0x4b/0x480
[  405.024320][  T107]  __kmem_cache_alloc_node+0x140/0x260
[  405.029770][  T107]  __kmalloc_node+0xa0/0x240
[  405.034355][  T107]  kvmalloc_node+0x6c/0x180
[  405.038853][  T107]  seq_read_iter+0x1f6/0xd50
[  405.043430][  T107]  vfs_read+0x4a7/0xa00
[  405.047575][  T107]  ksys_read+0x14c/0x250
[  405.051813][  T107]  do_syscall_64+0x4c/0xa0
[  405.056222][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  405.062108][  T107] 
[  405.064417][  T107] Memory state around the buggy address:
[  405.070036][  T107]  ffff888027e9af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  405.078085][  T107]  ffff888027e9af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  405.086149][  T107] >ffff888027e9b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  405.094570][  T107]                                            ^
[  405.100712][  T107]  ffff888027e9b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  405.108758][  T107]  ffff888027e9b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  405.116822][  T107] ==================================================================
[  405.260527][T12824] hfsplus: found bad thread record in catalog
[  405.287888][T12824] hfsplus: found bad thread record in catalog
[  405.288728][  T107] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  405.288741][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0
[  405.288758][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  405.288769][  T107] Call Trace:
[  405.288774][  T107]  <TASK>
[  405.288781][  T107]  dump_stack_lvl+0x188/0x24e
[  405.288809][  T107]  ? memcpy+0x3c/0x60
[  405.288826][  T107]  ? show_regs_print_info+0x12/0x12
[  405.288848][  T107]  ? load_image+0x400/0x400
[  405.288872][  T107]  panic+0x2e5/0x730
[  405.288890][  T107]  ? bpf_jit_dump+0xd0/0xd0
[  405.288908][  T107]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  405.288928][  T107]  ? _raw_spin_unlock+0x40/0x40
[  405.288947][  T107]  check_panic_on_warn+0x80/0xa0
[  405.288967][  T107]  ? txEnd+0x329/0x520
[  405.288985][  T107]  end_report+0x66/0x110
[  405.289006][  T107]  kasan_report+0x118/0x140
[  405.289027][  T107]  ? mutex_unlock+0x10/0x10
[  405.289049][  T107]  ? txEnd+0x329/0x520
[  405.289069][  T107]  kasan_check_range+0x235/0x290
[  405.289092][  T107]  txEnd+0x329/0x520
[  405.289112][  T107]  jfs_lazycommit+0x5a0/0xa70
[  405.289140][  T107]  ? txFreelock+0x5a0/0x5a0
[  405.289158][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  405.289176][  T107]  ? do_task_dead+0xd0/0xd0
[  405.289198][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  405.289217][  T107]  ? __kthread_parkme+0x162/0x1c0
[  405.289246][  T107]  kthread+0x29d/0x330
[  405.289260][  T107]  ? txFreelock+0x5a0/0x5a0
[  405.289278][  T107]  ? kthread_blkcg+0xd0/0xd0
[  405.289293][  T107]  ret_from_fork+0x1f/0x30
[  405.289319][  T107]  </TASK>
[  405.294318][  T107] Kernel Offset: disabled
[  405.452701][  T107] Rebooting in 86400 seconds..